plutonium 0.64.0 → 0.65.0

data/app/views/plutonium/_flash_alerts.html.erb

@@ -36,8 +36,8 @@
   <button type="button"
     class="pu-alert-close"
     data-action="click->resource-dismiss#dismiss"
-    aria-label="Close">
-      <span class="sr-only">Close</span>
+    aria-label="<%= t("plutonium.resource.flash.close") %>">
+      <span class="sr-only"><%= t("plutonium.resource.flash.close") %></span>
       <svg class="w-3 h-3" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 14 14">
           <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m1 1 6 6m0 0 6 6M7 7l6-6M7 7l-6 6"/>
       </svg>

data/app/views/plutonium/_resource_header.html.erb

@@ -12,7 +12,7 @@
       ) do |nav|
         if try(:profile_url)
           nav.with_section do |section|
-            section.with_link(label: "Profile", href: profile_url) do |link|
+            section.with_link(label: t("plutonium.resource.nav.profile"), href: profile_url) do |link|
               link.with_leading do
                 render Phlex::TablerIcons::User.new(class: "mr-2 text-gray-400 w-4 h-4")
               end
@@ -21,7 +21,7 @@
         end
 
         nav.with_section do |section|
-          section.with_link(label: "Sign out", href: try(:logout_url) || "#", class: "rounded-b-lg", data: {turbo: false})
+          section.with_link(label: t("plutonium.resource.nav.sign_out"), href: try(:logout_url) || "#", class: "rounded-b-lg", data: {turbo: false})
         end
       end
     %>

data/app/views/plutonium/_resource_sidebar.html.erb

@@ -1,8 +1,17 @@
 <%= render Plutonium::UI::Layout::IconRail.new(
       menu: Phlexi::Menu::Builder.new do |m|
-        m.item "Dashboard", url: root_path, icon: Phlex::TablerIcons::Home
+        m.item t("plutonium.resource.nav.home"), url: root_path, icon: Phlex::TablerIcons::Home
 
-        m.item "Resources", icon: Phlex::TablerIcons::GridDots do |n|
+        dashboards = registered_dashboards.reject { |dashboard| dashboard_path_for(dashboard) == root_path }
+        if dashboards.any?
+          m.item t("plutonium.resource.nav.dashboards"), icon: Phlex::TablerIcons::LayoutDashboard do |n|
+            dashboards.each do |dashboard|
+              n.item dashboard.label, url: dashboard_path_for(dashboard), icon: dashboard.icon
+            end
+          end
+        end
+
+        m.item t("plutonium.resource.nav.resources"), icon: Phlex::TablerIcons::GridDots do |n|
           registered_resources.each do |resource|
             n.item resource_label(resource), url: resource_url_for(resource, parent: nil)
           end

data/app/views/plutonium/_toast.html.erb

@@ -43,8 +43,8 @@
   <button type="button"
     class="pu-toast-close"
     data-action="click->resource-dismiss#dismiss"
-    aria-label="Close">
-      <span class="sr-only">Close</span>
+    aria-label="<%= t("plutonium.resource.flash.close") %>">
+      <span class="sr-only"><%= t("plutonium.resource.flash.close") %></span>
       <svg class="w-3 h-3" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 14 14">
           <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m1 1 6 6m0 0 6 6M7 7l6-6M7 7l-6 6"/>
       </svg>

data/app/views/rodauth/_login_form.html.erb

@@ -9,7 +9,7 @@
                      id: "login",
                      autocomplete: rodauth.login_field_autocomplete_value,
                      required: true,
-                     placeholder: "jane@acme.inc",
+                     placeholder: t("plutonium.resource.auth.login_placeholder"),
                      class: "pu-input #{rodauth.field_error(rodauth.login_param) ? 'pu-input-invalid' : ''}",
                      aria: (rodauth.field_error(rodauth.login_param) ? { invalid: true, describedby: "login_error_message" } : nil) %>
     <% unless rodauth.skip_login_field_on_login? %>

data/app/views/rodauth/_password_visibility.html.erb

@@ -8,6 +8,6 @@
     data-action="password-visibility#toggle"
   >
   <label for="reveal-password" class="text-sm font-medium text-[var(--pu-text)]">
-    Show Password
+    <%= t("plutonium.resource.auth.show_password") %>
   </label>
 </div>

data/app/views/rodauth/add_recovery_codes.html.erb

@@ -1,5 +1,5 @@
 <div>
-  <h4 class="text-2xl font-bold text-[var(--pu-text)] mb-4">Recovery Codes</h4>
+  <h4 class="text-2xl font-bold text-[var(--pu-text)] mb-4"><%= t("plutonium.resource.auth.recovery_codes") %></h4>
 
   <div class="mb-4 text-sm grid grid-cols-1 gap-y-2 gap-x-4 text-[var(--pu-text-muted)]">
     <% if rodauth.recovery_codes.any? %>
@@ -7,7 +7,7 @@
         <div class="font-mono"><%= code %></div>
       <% end %>
     <% else %>
-        <div class="font-mono">You have no recovery codes</div>
+        <div class="font-mono"><%= t("plutonium.resource.auth.no_recovery_codes") %></div>
     <% end %>
   </div>
 

data/app/views/rodauth/change_login.html.erb

@@ -6,7 +6,7 @@
                      id: "login",
                      autocomplete: "email",
                      required: true,
-                     placeholder: "jane@acme.inc",
+                     placeholder: t("plutonium.resource.auth.login_placeholder"),
                      class: "pu-input #{rodauth.field_error(rodauth.login_param) ? 'pu-input-invalid' : ''}",
                      aria: (rodauth.field_error(rodauth.login_param) ? { invalid: true, describedby: "login_error_message" } : nil) %>
     <% if rodauth.field_error(rodauth.login_param) %>
@@ -22,7 +22,7 @@
                        id: "login-confirm",
                        autocomplete: "email",
                        required: true,
-                       placeholder: "jane@acme.inc",
+                       placeholder: t("plutonium.resource.auth.login_placeholder"),
                        class: "pu-input #{rodauth.field_error(rodauth.login_confirm_param) ? 'pu-input-invalid' : ''}",
                        aria: (rodauth.field_error(rodauth.login_confirm_param) ? { invalid: true, describedby: "login-confirm_error_message" } : nil) %>
       <% if rodauth.field_error(rodauth.login_confirm_param) %>

data/app/views/rodauth/create_account.html.erb

@@ -6,7 +6,7 @@
                      id: "login",
                      autocomplete: "email",
                      required: true,
-                     placeholder: "jane@acme.inc",
+                     placeholder: t("plutonium.resource.auth.login_placeholder"),
                      class: "pu-input #{rodauth.field_error(rodauth.login_param) ? 'pu-input-invalid' : ''}",
                      aria: (rodauth.field_error(rodauth.login_param) ? { invalid: true, describedby: "login_error_message" } : nil) %>
     <% if rodauth.field_error(rodauth.login_param) %>
@@ -22,7 +22,7 @@
                        id: "login-confirm",
                        autocomplete: "email",
                        required: true,
-                       placeholder: "jane@acme.inc",
+                       placeholder: t("plutonium.resource.auth.login_placeholder"),
                        class: "pu-input #{rodauth.field_error(rodauth.login_confirm_param) ? 'pu-input-invalid' : ''}",
                        aria: (rodauth.field_error(rodauth.login_confirm_param) ? { invalid: true, describedby: "login-confirm_error_message" } : nil) %>
       <% if rodauth.field_error(rodauth.login_confirm_param) %>
@@ -70,6 +70,6 @@
 <% end %>
 
 <p class="text-sm font-medium text-[var(--pu-text-muted)]">
-  Already have an account?
-  <%= link_to "Login", rodauth.login_path, class: "font-medium text-secondary-600 dark:text-secondary-400 hover:underline transition-colors" %>
+  <%= t("plutonium.resource.auth.already_have_account") %>
+  <%= link_to t("plutonium.resource.auth.login"), rodauth.login_path, class: "font-medium text-secondary-600 dark:text-secondary-400 hover:underline transition-colors" %>
 </p>

data/app/views/rodauth/reset_password_request.html.erb

@@ -12,7 +12,7 @@
                        id: "login",
                        autocomplete: "email",
                        required: true,
-                       placeholder: "jane@acme.inc",
+                       placeholder: t("plutonium.resource.auth.login_placeholder"),
                        class: "pu-input #{rodauth.field_error(rodauth.login_param) ? 'pu-input-invalid' : ''}",
                        aria: (rodauth.field_error(rodauth.login_param) ? { invalid: true, describedby: "login_error_message" } : nil) %>
       <% if rodauth.field_error(rodauth.login_param) %>

data/app/views/rodauth/verify_account_resend.html.erb

@@ -12,7 +12,7 @@
                        id: "login",
                        autocomplete: "email",
                        required: true,
-                       placeholder: "jane@acme.inc",
+                       placeholder: t("plutonium.resource.auth.login_placeholder"),
                        class: "pu-input #{rodauth.field_error(rodauth.login_param) ? 'pu-input-invalid' : ''}",
                        aria: (rodauth.field_error(rodauth.login_param) ? { invalid: true, describedby: "login_error_message" } : nil) %>
       <% if rodauth.field_error(rodauth.login_param) %>

data/app/views/rodauth/webauthn_remove.html.erb

@@ -20,7 +20,7 @@
       <div class="flex items-center space-x-2">
         <% last_use = last_use.strftime(rodauth.strftime_format) if last_use.is_a?(Time) %>
         <%= form.radio_button rodauth.webauthn_remove_param, id, id: "webauthn-remove-#{id}", class: "pu-checkbox" %>
-        <%= form.label "webauthn-remove-#{id}", "Last use: #{last_use}", class: "text-sm text-[var(--pu-text)]" %>
+        <%= form.label "webauthn-remove-#{id}", t("plutonium.resource.auth.last_use", time: last_use), class: "text-sm text-[var(--pu-text)]" %>
       </div>
     <% end %>
     <% if rodauth.field_error(rodauth.webauthn_remove_param) %>

data/config/brakeman.ignore

@@ -144,13 +144,13 @@
     {
       "warning_type": "Dangerous Eval",
       "warning_code": 13,
-      "fingerprint": "bdacd028907815ba0db0cf99e069d1ea7e94a6e527b7746efd97886c52b2f928",
+      "fingerprint": "026d28515125c36a64a867a16e51695ea57d865cb52b361f69eeeb1c460b4849",
       "check_name": "Evaluation",
       "message": "Dynamic string evaluated as code",
       "file": "lib/plutonium/models/has_cents.rb",
       "line": 162,
       "link": "https://brakemanscanner.org/docs/warning_types/dangerous_eval/",
-      "code": "class_eval(\"            # Getter method for the decimal representation of the cents value.\\n            #\\n            # @return [BigDecimal, nil] The decimal value or nil if cents_name is not present.\\n            def #{(:\"#{cents_name.to_sym}_#{suffix}\" or cents_name.to_sym.to_s.gsub(/_cents$/, \"\").to_sym)}\\n              #{cents_name.to_sym}.to_d / #{rate} if #{cents_name.to_sym}.present?\\n            end\\n\\n            # Setter method for the decimal representation of the cents value.\\n            #\\n            # @param value [Numeric, nil] The decimal value to be set.\\n            def #{(:\"#{cents_name.to_sym}_#{suffix}\" or cents_name.to_sym.to_s.gsub(/_cents$/, \"\").to_sym)}=(value)\\n              self.#{cents_name.to_sym} = begin\\n                (BigDecimal(value.to_s) * #{rate}).to_i if value.present?\\n              rescue ArgumentError\\n                nil\\n              end\\n            end\\n\\n            # Mark decimal field as invalid if cents field is not valid\\n            after_validation do\\n              next unless errors[#{cents_name.to_sym.inspect}].present?\\n\\n              errors.add(#{(:\"#{cents_name.to_sym}_#{suffix}\" or cents_name.to_sym.to_s.gsub(/_cents$/, \"\").to_sym).inspect}, :invalid)\\n            end\\n\", \"lib/plutonium/models/has_cents.rb\", 135)",
+      "code": "class_eval(\"            # Getter method for the decimal representation of the cents value.\\n            #\\n            # @return [BigDecimal, nil] The decimal value or nil if cents_name is not present.\\n            def #{(:\"#{cents_name.to_sym}_#{suffix}\" or cents_name.to_sym.to_s.gsub(/_cents$/, \"\").to_sym)}\\n              #{cents_name.to_sym}.to_d / #{rate} if #{cents_name.to_sym}.present?\\n            end\\n\\n            # Setter method for the decimal representation of the cents value.\\n            #\\n            # @param value [Numeric, nil] The decimal value to be set.\\n            def #{(:\"#{cents_name.to_sym}_#{suffix}\" or cents_name.to_sym.to_s.gsub(/_cents$/, \"\").to_sym)}=(value)\\n              self.#{cents_name.to_sym} = begin\\n                (BigDecimal(value.to_s) * #{rate}).to_i if value.present?\\n              rescue ArgumentError, FloatDomainError\\n                nil\\n              end\\n            end\\n\\n            # Mark decimal field as invalid if cents field is not valid\\n            after_validation do\\n              next unless errors[#{cents_name.to_sym.inspect}].present?\\n\\n              errors.add(#{(:\"#{cents_name.to_sym}_#{suffix}\" or cents_name.to_sym.to_s.gsub(/_cents$/, \"\").to_sym).inspect}, :invalid)\\n            end\\n\", \"lib/plutonium/models/has_cents.rb\", 163)",
       "render_path": null,
       "location": {
         "type": "method",
@@ -237,13 +237,13 @@
     {
       "warning_type": "Redirect",
       "warning_code": 18,
-      "fingerprint": "ce92f474802c81eb79c01577415a82ef604bddcb8072b68c5508260b2b0b7469",
+      "fingerprint": "4ea59ff297ad43eec0ad1ba3ed7c4fa459eb627312a017f3fcf58cdb3fd59104",
       "check_name": "Redirect",
       "message": "Possible unprotected redirect",
       "file": "lib/plutonium/invites/controller.rb",
       "line": 76,
       "link": "https://brakemanscanner.org/docs/warning_types/redirect/",
-      "code": "redirect_to(invitation_path_for(params[:token]), :alert => \"Please sign in to accept this invitation\")",
+      "code": "redirect_to(invitation_path_for(params[:token]), :alert => t(\"plutonium.invites.controller.sign_in_to_accept\"))",
       "render_path": null,
       "location": {
         "type": "method",

data/config/initializers/rabl.rb

@@ -21,29 +21,6 @@ Rabl.configure do |config|
   config.cache_sources = !Rails.env.development? # Defaults to false
   config.raise_on_missing_attribute = !Rails.env.production? # Defaults to false
   config.json_engine = Plutonium::RablJsonEngine
-
-  # config.cache_all_output = false
-  # config.cache_engine = Rabl::CacheEngine.new # Defaults to Rails cache
-  # config.perform_caching = false
-  # config.escape_all_output = false
-  # config.json_engine = nil # Class with #dump class method (defaults JSON)
-  # config.msgpack_engine = nil # Defaults to ::MessagePack
-  # config.bson_engine = nil # Defaults to ::BSON
-  # config.plist_engine = nil # Defaults to ::Plist::Emit
-  # config.include_json_root = true
-  # config.include_msgpack_root = true
-  # config.include_bson_root = true
-  # config.include_plist_root = true
-  # config.include_xml_root  = false
-  # config.include_child_root = true
-  # config.enable_json_callbacks = false
-  # config.xml_options = { :dasherize  => true, :skip_types => false }
-  # config.view_paths = []
-  # config.replace_nil_values_with_empty_strings = true # Defaults to false
-  # config.replace_empty_string_values_with_nil_values = true # Defaults to false
-  # config.exclude_nil_values = true # Defaults to false
-  # config.exclude_empty_values_in_collections = true # Defaults to false
-  # config.camelize_keys = :upper # Defaults to false
 end
 
 # Extend Rabl source lookup to make it compatible with Rails view lookup
@@ -82,21 +59,4 @@ module Rabl
   end
 end
 
-# Rails 8 compatible template handler registration
-Rails.application.config.to_prepare do
-  unless ActionView::Template::Handlers.extensions.include?(:rabl)
-    # Create a proper callable handler for Rails 8
-    rabl_handler = lambda do |template, source|
-      # Rails 8 expects the handler to return Ruby code that will be evaluated
-      # The code should return the rendered content
-      %{
-        rabl_engine = Rabl::Engine.new(#{source.inspect})
-        rabl_engine.render(self, assigns.merge(local_assigns))
-      }
-    end
-
-    ActionView::Template.register_template_handler(:rabl, rabl_handler)
-  end
-end
-
 Rabl.register!

data/config/locales/en/api_client.yml

@@ -0,0 +1,22 @@
+# Strings rendered by Plutonium::ApiClient (the create / disable interactions
+# and the credentials page shown once after an API client is created).
+en:
+  plutonium:
+    api_client:
+      create:
+        label: "Create API Client"
+        failed: "Failed to create account: %{error}"
+        credentials:
+          success_title: "API Client Created Successfully"
+          important_label: "Important:"
+          important_text: "Save these credentials now. The password cannot be retrieved later."
+          login: "Login"
+          password: "Password"
+          copy: "Copy"
+          copy_all: "Copy All"
+          done: "Done"
+          credentials_text: "Login: %{login}\nPassword: %{password}"
+      disable:
+        label: "Disable"
+        description: "Disable this API client (cannot be undone)"
+        disabled: "API client '%{login}' has been disabled"

data/config/locales/en/async.yml

@@ -0,0 +1,34 @@
+# Async interaction runs: the progress page, the running banner, and the
+# messages an executor writes into a run's errors_log. Run state / outcome
+# VALUES ("Completed with errors") are enum-like and resolve by convention
+# (plutonium.values.*), not here.
+en:
+  plutonium:
+    async:
+      run:
+        label: "%{name} #%{id}"
+        target_type: "Target type"
+        enqueue_failed: "could not be enqueued for execution"
+      executor:
+        target_missing: "Target %{id} is no longer available"
+        target_unauthorized: "Target %{id} is no longer permitted by %{action}"
+        batch_aborted: "target %{id} failed (%{error}); no targets were applied"
+        halted:
+          one: "stopped at the first target failure (%{policy} policy); %{count} target was not attempted"
+          other: "stopped at the first target failure (%{policy} policy); %{count} targets were not attempted"
+        partial_batch_refused: "%{unresolved} of %{total} targets could not be resolved; a %{policy} run does not apply a partial batch"
+      context:
+        initiator_missing: "run %{run} has no initiator (%{type}#%{id} no longer exists)"
+        tenant_missing: "run %{run} was scoped to %{type}#%{id}, which no longer exists; refusing to resolve targets without a tenant"
+        parent_missing: "run %{run} was nested under %{type}#%{id}, which no longer exists; refusing to resolve targets without its parent"
+      progress:
+        targets: "%{done} of %{total} targets (%{percent}%)"
+        working: "Working…"
+        no_total: "No progress total was recorded"
+        failures: "Failures"
+        error_count:
+          one: "%{count} error"
+          other: "%{count} errors"
+        target_failure: "#%{target_id}: %{message}"
+      banner:
+        view_progress: "View progress"

data/config/locales/en/dashboard.yml

@@ -0,0 +1,25 @@
+# Fixed strings rendered by dashboards (lib/plutonium/dashboard,
+# lib/plutonium/ui/dashboard). Dashboard and card titles resolve by convention
+# instead, layered per portal like every other derived label:
+#
+#   plutonium.dashboards.<dashboard>.label
+#   plutonium.dashboards.<dashboard>.description
+#   plutonium.dashboards.<dashboard>.cards.<card>.label
+#   plutonium.dashboards.<dashboard>.cards.<card>.description
+#   plutonium.portals.<portal>.dashboards.<dashboard>...
+#
+# `<dashboard>` is the class name underscored without the "Dashboard" suffix
+# (`AdminPortal::SalesDashboard` → `admin_portal/sales`).
+en:
+  plutonium:
+    dashboard:
+      authorization_denied: "You are not allowed to view this dashboard."
+      no_cards: "There is nothing to show on this dashboard yet."
+      card_error: "This card could not be loaded."
+      loading_card: "Loading %{card}..."
+      open: "Open"
+      metric:
+        empty: "—"
+        increase: "Up %{change}"
+        decrease: "Down %{change}"
+        unchanged: "No change"

data/config/locales/en/invites.yml

@@ -0,0 +1,37 @@
+# Strings rendered by Plutonium::Invites (invitation acceptance controller and
+# the invite / resend / cancel interactions). Validation messages the invite
+# model adds by symbol live under errors.messages so ActiveModel resolves them.
+en:
+  plutonium:
+    invites:
+      controller:
+        email_validation_error: "Email Validation Error"
+        sign_in_to_accept: "Please sign in to accept this invitation"
+        accepted: "Invitation accepted! Welcome to %{entity}!"
+        acceptance_error: "Acceptance Error"
+        invalid_or_expired: "Invalid or Expired Invitation"
+        no_longer_valid: "This invitation link is no longer valid. It may have expired or already been used."
+        passwords_dont_match: "Passwords don't match"
+        account_exists: "An account with this email already exists. Please sign in instead."
+        create_account_failed: "Failed to create account"
+        create_account_failed_with_error: "Failed to create account: %{error}"
+      invite_user:
+        sent: "Invitation sent to %{email}"
+      resend_invite:
+        label: "Resend Invitation"
+        not_pending: "Can only resend pending invitations"
+        failed: "Failed to resend: %{error}"
+        resent: "Invitation resent to %{email}"
+      cancel_invite:
+        label: "Cancel Invitation"
+        not_pending: "Can only cancel pending invitations"
+        cancelled: "Invitation cancelled"
+  errors:
+    messages:
+      invite_email_mismatch: "This invitation is for %{email}. You must use an account with that email address."
+      invite_domain_mismatch: "This invitation requires an email from the %{domain} domain."
+      invite_already_accepted: "This invitation has already been accepted"
+      invite_cancelled: "This invitation has been cancelled"
+      invite_expired: "This invitation has expired"
+      already_a_member: "is already a member"
+      already_has_pending_invitation: "already has a pending invitation"

data/config/locales/en/js.yml

@@ -0,0 +1,40 @@
+# Strings used by Plutonium's bundled JavaScript (src/js). The whole
+# `plutonium.js` subtree is serialised into `<script id="pu-i18n">` on every
+# page by Plutonium::UI::Layout::Base and read by `t()` in src/js/i18n.js, so
+# any key here can be overridden from the host app's config/locales.
+#
+# `libraries.*` are optional passthroughs to the third-party widgets' own
+# locale options; an absent entry leaves the library at its built-in default.
+en:
+  plutonium:
+    js:
+      are_you_sure: "Are you sure?"
+      clipboard:
+        copied: "Copied!"
+      slim_select:
+        search_failed: "Search failed"
+      dirty_form_guard:
+        unsaved_changes: "You have unsaved changes that will be lost. Continue?"
+        discard_changes: "Discard your changes?"
+      attachment_input:
+        choose_file:
+          one: "Choose file"
+          other: "Choose files"
+        delete_all: "Delete %{count}"
+      turbo_confirm:
+        cancel: "Cancel"
+        confirm: "Confirm"
+      charts:
+        empty: "No data"
+        loading: "Loading..."
+        failed: "The chart could not be loaded."
+      libraries:
+        # SlimSelect `settings` (https://slimselectjs.com/settings)
+        slim_select:
+          placeholderText: "Select Value"
+          searchText: "No Results"
+          searchPlaceholder: "Search"
+          searchingText: "Searching..."
+        # flatpickr: `locale: "de"` (the host must load the matching l10n bundle)
+        # uppy: `strings: {...}` (Uppy locale strings, merged over the English defaults)
+        # intl_tel_input: `{...}` (intl-tel-input `i18n` option)

data/config/locales/en/kanban.yml

@@ -0,0 +1,28 @@
+# Kanban board strings. Column LABELS are not here: they resolve by convention
+# (plutonium.kanban_columns.<model>.<column>, see config/locales/en/plutonium.yml).
+en:
+  plutonium:
+    kanban:
+      column:
+        expand: "Expand %{column}"
+        collapse: "Collapse %{column}"
+        wip_limit_exceeded: "WIP limit exceeded"
+        wip_limit: "WIP limit: %{limit}"
+        more:
+          one: "+%{count} more"
+          other: "+%{count} more"
+        add_to: "Add to %{column}"
+        add: "+ Add"
+      move:
+        not_in_column: "This card is no longer in “%{column}”."
+        locked_source: "Cards can't be moved out of “%{column}”."
+        not_accepted: "Cards can't be moved into “%{column}”."
+        not_allowed: "This card can't be moved there."
+        wip_limit_reached: "“%{column}” is at its WIP limit (%{wip})."
+        drop_incomplete: "This drop can’t be completed."
+        enter_interaction_failed: "“%{column}” could not be applied."
+        unauthorized: "You are not authorized to move this card there."
+        record_missing: "This card no longer exists."
+        record_invalid: "This card could not be moved."
+      quick_add:
+        default_column_fallback: "Couldn’t place it in “%{column}” — it stayed in its default column."

data/config/locales/en/plutonium.yml

@@ -0,0 +1,26 @@
+# Plutonium's own strings. Loaded at the lowest precedence: a package or
+# portal engine's config/locales and the host app's config/locales both win.
+#
+# Convention keys the framework resolves on its own (never declared here):
+#
+#   plutonium.fields.<model>.<attr>.{placeholder,hint,description}
+#   plutonium.actions.<model>.<action>
+#   plutonium.scopes.<model>.<scope>
+#   plutonium.filters.<model>.<filter>
+#   plutonium.kanban_columns.<model>.<column>
+#   plutonium.wizard_steps.<wizard>.<step>
+#   plutonium.dashboards.<dashboard>.{label,description}
+#   plutonium.dashboards.<dashboard>.cards.<card>.{label,description}
+#   plutonium.values.<model>.<attr>.<value>
+#
+# each also under plutonium.portals.<portal>.* for a portal-specific override.
+en:
+  plutonium:
+    boolean:
+      "true": "Yes"
+      "false": "No"
+    actions:
+      # Confirmation prompt for an immediate action that declares none.
+      confirm_default: "%{label}?"
+      # Confirmation prompt on the standard destroy action.
+      confirm_destroy: "Are you sure?"

data/config/locales/en/positioning.yml

@@ -0,0 +1,14 @@
+# Drag-to-reorder: the reposition endpoint's refusal toasts and the row grip.
+en:
+  plutonium:
+    positioning:
+      reposition:
+        foreign_sort: "Reordering is only available while the list is sorted by %{attribute}."
+        foreign_group: "Reordering only works within the same %{group}."
+        unauthorized: "You are not authorized to reorder this."
+        record_missing: "This record no longer exists."
+        record_invalid: "This record could not be moved."
+      drag_handle:
+        title: "Drag to reorder"
+        aria_label: "Drag to reorder. Use the up and down arrow keys to move this row."
+        disabled_title: "Sort by position to reorder"

data/config/locales/en/profile.yml

@@ -0,0 +1,29 @@
+# Strings rendered by Plutonium::Profile (the account security section).
+en:
+  plutonium:
+    profile:
+      security_section:
+        title: "Security Settings"
+        description: "Manage your account security"
+        features:
+          change_password:
+            label: "Change Password"
+            description: "Update your account password"
+          change_login:
+            label: "Change Email"
+            description: "Update your email address"
+          otp:
+            label: "Two-Factor Authentication"
+            description: "Add an extra layer of security"
+          recovery_codes:
+            label: "Recovery Codes"
+            description: "View or regenerate backup codes"
+          webauthn:
+            label: "Security Keys"
+            description: "Manage passkeys and security keys"
+          active_sessions:
+            label: "Active Sessions"
+            description: "View and manage your sessions"
+          close_account:
+            label: "Close Account"
+            description: "Permanently delete your account"

data/config/locales/en/resource.yml

@@ -0,0 +1,60 @@
+# Resource CRUD, query/filter and authentication-view strings.
+# Loaded at the lowest precedence: a package, portal or host app locale
+# with the same key wins (see config/locales/en/plutonium.yml).
+en:
+  plutonium:
+    resource:
+      created: "%{resource} was successfully created."
+      updated: "%{resource} was successfully updated."
+      deleted: "%{resource} was successfully deleted."
+      referenced: "%{resource} is referenced by other records."
+      titles:
+        new: "Create %{resource}"
+        edit: "Update %{record}"
+      record_label: "%{resource} #%{id}"
+      export_csv:
+        invalid_column: "<<invalid column>>"
+      nav:
+        home: "Home"
+        dashboards: "Dashboards"
+        resources: "Resources"
+        profile: "Profile"
+        sign_out: "Sign out"
+      flash:
+        close: "Close"
+      auth:
+        login_placeholder: "jane@acme.inc"
+        show_password: "Show Password"
+        recovery_codes: "Recovery Codes"
+        no_recovery_codes: "You have no recovery codes"
+        already_have_account: "Already have an account?"
+        login: "Login"
+        last_use: "Last use: %{time}"
+    query:
+      # One input of a multi-input filter, e.g. "Created at (from)".
+      filter_input_label: "%{label} (%{input})"
+      all: "All"
+      active_filter:
+        input_value: "%{input} %{value}"
+      filters:
+        text:
+          matches: "%{label} (use * as wildcard)"
+          starts_with: "%{label} starts with..."
+          ends_with: "%{label} ends with..."
+          contains: "%{label} contains..."
+        date:
+          not_eq: "%{label} not on..."
+          lt: "%{label} before..."
+          lteq: "%{label} on or before..."
+          gt: "%{label} after..."
+          gteq: "%{label} on or after..."
+        date_range:
+          from: "%{label} from..."
+          to: "%{label} to..."
+  errors:
+    messages:
+      existing_references: "is referenced by other records"
+      invalid_url: "is not a valid URL"
+      invalid_image_url: "is not a valid image URL"
+      not_attached: "must be attached"
+      array_item: "item %{index} %{message}"