@authup/i18n 1.0.0-beta.65 → 1.0.0-beta.67

package/dist/index.mjs

@@ -125,6 +125,15 @@ let TranslatorTranslationClientKey = /* @__PURE__ */ function(TranslatorTranslat
 	TranslatorTranslationClientKey["ACCESS_DENIED_TEXT"] = "accessDeniedText";
 	TranslatorTranslationClientKey["CLIENT_ACCESS_POLICY_HINT"] = "clientAccessPolicyHint";
 	TranslatorTranslationClientKey["CONSENT_STATUS_LOADING"] = "consentStatusLoading";
+	TranslatorTranslationClientKey["DEVICE_VERIFY_TITLE"] = "deviceVerifyTitle";
+	TranslatorTranslationClientKey["DEVICE_CODE_LABEL"] = "deviceCodeLabel";
+	TranslatorTranslationClientKey["DEVICE_CODE_HINT"] = "deviceCodeHint";
+	TranslatorTranslationClientKey["DEVICE_CODE_INVALID"] = "deviceCodeInvalid";
+	TranslatorTranslationClientKey["DEVICE_VERIFY_CONFIRM_TEXT"] = "deviceVerifyConfirmText";
+	TranslatorTranslationClientKey["DEVICE_VERIFY_SCOPES"] = "deviceVerifyScopes";
+	TranslatorTranslationClientKey["DEVICE_VERIFY_APPROVED"] = "deviceVerifyApproved";
+	TranslatorTranslationClientKey["DEVICE_VERIFY_DENIED"] = "deviceVerifyDenied";
+	TranslatorTranslationClientKey["DEVICE_VERIFY_THROTTLED"] = "deviceVerifyThrottled";
 	TranslatorTranslationClientKey["LOGOUT_CONFIRM_TITLE"] = "logoutConfirmTitle";
 	TranslatorTranslationClientKey["LOGOUT_CONFIRM_TEXT"] = "logoutConfirmText";
 	TranslatorTranslationClientKey["LOGOUT_DONE"] = "logoutDone";
@@ -208,6 +217,53 @@ let TranslatorTranslationAppKey = /* @__PURE__ */ function(TranslatorTranslation
 	TranslatorTranslationAppKey["POLICY_DESCRIPTION"] = "policyDescription";
 	TranslatorTranslationAppKey["EVENT_DESCRIPTION"] = "eventDescription";
 	TranslatorTranslationAppKey["SESSION_DESCRIPTION"] = "sessionDescription";
+	TranslatorTranslationAppKey["PATH_DESCRIPTION"] = "pathDescription";
+	TranslatorTranslationAppKey["DASHBOARD"] = "dashboard";
+	TranslatorTranslationAppKey["DASHBOARD_DESCRIPTION"] = "dashboardDescription";
+	TranslatorTranslationAppKey["DASHBOARD_WINDOW"] = "dashboardWindow";
+	TranslatorTranslationAppKey["DASHBOARD_WINDOW_24H"] = "dashboardWindow24h";
+	TranslatorTranslationAppKey["DASHBOARD_WINDOW_7D"] = "dashboardWindow7d";
+	TranslatorTranslationAppKey["DASHBOARD_WINDOW_30D"] = "dashboardWindow30d";
+	TranslatorTranslationAppKey["DASHBOARD_WINDOW_90D"] = "dashboardWindow90d";
+	TranslatorTranslationAppKey["DASHBOARD_LOGINS"] = "dashboardLogins";
+	TranslatorTranslationAppKey["DASHBOARD_LOGINS_FAILED"] = "dashboardLoginsFailed";
+	TranslatorTranslationAppKey["DASHBOARD_AUTHORIZATIONS"] = "dashboardAuthorizations";
+	TranslatorTranslationAppKey["DASHBOARD_EVENTS"] = "dashboardEvents";
+	TranslatorTranslationAppKey["DASHBOARD_LOGIN_VOLUME"] = "dashboardLoginVolume";
+	TranslatorTranslationAppKey["DASHBOARD_EVENTS_BY_TYPE"] = "dashboardEventsByType";
+	TranslatorTranslationAppKey["DASHBOARD_EVENTS_LINK"] = "dashboardEventsLink";
+	TranslatorTranslationAppKey["DASHBOARD_EMPTY"] = "dashboardEmpty";
+	TranslatorTranslationAppKey["DASHBOARD_EVENT_LOG_DISABLED"] = "dashboardEventLogDisabled";
+	TranslatorTranslationAppKey["DASHBOARD_IDENTITIES"] = "dashboardIdentities";
+	TranslatorTranslationAppKey["DASHBOARD_CONFIGURATION"] = "dashboardConfiguration";
+	TranslatorTranslationAppKey["SESSIONS_ACTIVE"] = "sessionsActive";
+	/**
+	* The growth a statistics read reports next to a total: the rows created
+	* inside its window.
+	*/
+	TranslatorTranslationAppKey["STATS_NEW"] = "statsNew";
+	TranslatorTranslationAppKey["STATS_NEW_IN_DAYS"] = "statsNewInDays";
+	TranslatorTranslationAppKey["STATS_NEW_IN_HOURS"] = "statsNewInHours";
+	/**
+	* The activity boxes above an entity list: its total, and the rows the
+	* audit log saw created, updated and deleted inside the window.
+	*/
+	TranslatorTranslationAppKey["ACTIVITY_TOTAL"] = "activityTotal";
+	TranslatorTranslationAppKey["ACTIVITY_CREATED"] = "activityCreated";
+	TranslatorTranslationAppKey["ACTIVITY_UPDATED"] = "activityUpdated";
+	TranslatorTranslationAppKey["ACTIVITY_DELETED"] = "activityDeleted";
+	TranslatorTranslationAppKey["ACTIVITY_SOURCE"] = "activitySource";
+	/**
+	* The window line under an activity box, as on the dashboard tiles.
+	*/
+	TranslatorTranslationAppKey["ACTIVITY_IN_DAYS"] = "activityInDays";
+	TranslatorTranslationAppKey["ACTIVITY_IN_HOURS"] = "activityInHours";
+	TranslatorTranslationAppKey["ACTIVITY_ALL_TIME"] = "activityAllTime";
+	/**
+	* Why a statistics window is disabled: the records behind it are not
+	* kept that long.
+	*/
+	TranslatorTranslationAppKey["STATS_WINDOW_RETAINED"] = "statsWindowRetained";
 	TranslatorTranslationAppKey["SET_MANAGEMENT_REALM"] = "setManagementRealm";
 	TranslatorTranslationAppKey["API_DOCS"] = "apiDocs";
 	TranslatorTranslationAppKey["MADE_WITH"] = "madeWith";
@@ -267,6 +323,15 @@ let TranslatorTranslationAppKey = /* @__PURE__ */ function(TranslatorTranslation
 	TranslatorTranslationAppKey["IDENTITY_PROVIDER_DISCONNECT_CONFIRM_DESCRIPTION"] = "identityProviderDisconnectConfirmDescription";
 	TranslatorTranslationAppKey["IDENTITY_PROVIDER_LINK_SUCCESS"] = "identityProviderLinkSuccess";
 	TranslatorTranslationAppKey["IDENTITY_PROVIDER_LINK_FAILED"] = "identityProviderLinkFailed";
+	TranslatorTranslationAppKey["PATH_HINT"] = "pathHint";
+	TranslatorTranslationAppKey["PATH_SCOPE"] = "pathScope";
+	TranslatorTranslationAppKey["PATH_SCOPE_ALL"] = "pathScopeAll";
+	TranslatorTranslationAppKey["PATH_SCOPE_TRUNCATED"] = "pathScopeTruncated";
+	TranslatorTranslationAppKey["PATH_SCOPE_INCOMPLETE"] = "pathScopeIncomplete";
+	TranslatorTranslationAppKey["PATH_SCOPE_FAILED"] = "pathScopeFailed";
+	TranslatorTranslationAppKey["PATH_SCOPE_MISSING"] = "pathScopeMissing";
+	TranslatorTranslationAppKey["PATH_DELETE_CONFIRM_DESCRIPTION"] = "pathDeleteConfirmDescription";
+	TranslatorTranslationAppKey["PATH_DELETE_CONFIRM_UNKNOWN"] = "pathDeleteConfirmUnknown";
 	TranslatorTranslationAppKey["BACK_TO_APP"] = "backToApp";
 	return TranslatorTranslationAppKey;
 }({});
@@ -307,6 +372,7 @@ let TranslatorTranslationEntityKey = /* @__PURE__ */ function(TranslatorTranslat
 	TranslatorTranslationEntityKey["IDENTITY_PROVIDER"] = "identityProvider";
 	TranslatorTranslationEntityKey["IDENTITY_PROVIDER_ACCOUNT"] = "identityProviderAccount";
 	TranslatorTranslationEntityKey["KEY"] = "key";
+	TranslatorTranslationEntityKey["PATH"] = "path";
 	TranslatorTranslationEntityKey["PERMISSION"] = "permission";
 	TranslatorTranslationEntityKey["POLICY"] = "policy";
 	TranslatorTranslationEntityKey["REALM"] = "realm";
@@ -394,6 +460,7 @@ let TranslatorTranslationFieldKey = /* @__PURE__ */ function(TranslatorTranslati
 	TranslatorTranslationFieldKey["ACCESS_POLICY"] = "accessPolicy";
 	TranslatorTranslationFieldKey["ACTOR"] = "actor";
 	TranslatorTranslationFieldKey["REF"] = "ref";
+	TranslatorTranslationFieldKey["PARENT"] = "parent";
 	TranslatorTranslationFieldKey["PATH"] = "path";
 	TranslatorTranslationFieldKey["METHOD"] = "method";
 	TranslatorTranslationFieldKey["USE"] = "use";
@@ -522,6 +589,38 @@ const TranslatorTranslationAppEnglish = {
 	["policyDescription"]: "Rules that decide when a permission applies.",
 	["eventDescription"]: "Append-only audit trail of security relevant activity.",
 	["sessionDescription"]: "Active sign-ins, with the devices and tokens behind them.",
+	["pathDescription"]: "Folders that organize users and clients inside a realm.",
+	["dashboard"]: "Dashboard",
+	["dashboardDescription"]: "Sign-ins, authorizations and events in this realm at a glance.",
+	["dashboardWindow"]: "Window",
+	["dashboardWindow24h"]: "Last 24 hours",
+	["dashboardWindow7d"]: "Last 7 days",
+	["dashboardWindow30d"]: "Last 30 days",
+	["dashboardWindow90d"]: "Last 90 days",
+	["dashboardLogins"]: "Successful logins",
+	["dashboardLoginsFailed"]: "Failed logins",
+	["dashboardAuthorizations"]: "Authorizations",
+	["dashboardEvents"]: "Events",
+	["dashboardLoginVolume"]: "Logins over time",
+	["dashboardEventsByType"]: "Events by type",
+	["dashboardEventsLink"]: "View all events",
+	["dashboardEmpty"]: "No events in this window.",
+	["dashboardEventLogDisabled"]: "The event log is disabled, so nothing is recorded and there is nothing to show here. Enable it with EVENT_LOG_ENABLED.",
+	["dashboardIdentities"]: "Identities",
+	["dashboardConfiguration"]: "Configuration",
+	["sessionsActive"]: "Active sessions",
+	["statsNew"]: "+{{count}} new",
+	["statsNewInDays"]: "+{{count}} in {{days}} days",
+	["statsNewInHours"]: "+{{count}} in {{hours}} hours",
+	["activityTotal"]: "Total",
+	["activityCreated"]: "Created",
+	["activityUpdated"]: "Updated",
+	["activityDeleted"]: "Deleted",
+	["activitySource"]: "Created, updated and deleted are counted from the audit log.",
+	["activityInDays"]: "in {{days}} days",
+	["activityInHours"]: "in {{hours}} hours",
+	["activityAllTime"]: "all time",
+	["statsWindowRetained"]: "The audit log keeps these records for {{days}} days.",
 	["setManagementRealm"]: "Set as management realm",
 	["apiDocs"]: "API Docs",
 	["madeWith"]: "Made with",
@@ -581,6 +680,15 @@ const TranslatorTranslationAppEnglish = {
 	["identityProviderLinkFailed"]: "The account could not be connected.",
 	["keyDeleteForceConfirmTitle"]: "Crypto-shred encryption key?",
 	["keyDeleteForceConfirmDescription"]: "This key is still referenced by {{count}} encrypted secret(s). Deleting it makes them permanently unrecoverable.",
+	["pathHint"]: "Purely organizational. A path affects no permission, role or login.",
+	["pathScope"]: "Path",
+	["pathScopeAll"]: "All paths",
+	["pathScopeTruncated"]: "This folder holds too many subfolders to scope the list, so every row is shown.",
+	["pathScopeIncomplete"]: "This realm holds too many folders to show them all, so the tree stops short.",
+	["pathScopeFailed"]: "The folder could not be loaded, so nothing is listed.",
+	["pathScopeMissing"]: "This folder no longer exists, so nothing is listed.",
+	["pathDeleteConfirmDescription"]: "This deletes {{paths}} subfolders and unfiles {{users}} users and {{clients}} clients. No user and no client is deleted. This action cannot be undone.",
+	["pathDeleteConfirmUnknown"]: "The subfolders below this folder are deleted and every user and client filed under them is unfiled. The counts could not be read. This action cannot be undone.",
 	["backToApp"]: "Back to {{host}}"
 };
 //#endregion
@@ -592,7 +700,7 @@ const TranslatorTranslationClientEnglish = {
 	["postLogoutRedirectURIHint"]: "URI pattern an RP-initiated logout may redirect back to. Kept separate from the login redirect URIs. Leave empty to always end on the sign-out confirmation page.",
 	["baseUrlHint"]: "Where the application lives. Shown as a link on the account console. Leave empty to show the name only.",
 	["backchannelLogoutURIHint"]: "Endpoint that receives a logout token when a session ends (OIDC Back-Channel Logout). One http(s) URL, no patterns. Leave empty to send nothing.",
-	["grantTypesHint"]: "Restrict which OAuth2 grants this client may use. Select none to allow every grant.",
+	["grantTypesHint"]: "Restrict which OAuth2 grants this client may use. Select none to allow every grant. The device grant must be listed explicitly; an empty list does not enable it.",
 	["authMethod"]: "Authentication method",
 	["authMethodNone"]: "None",
 	["authMethodSecret"]: "Shared secret",
@@ -683,6 +791,15 @@ const TranslatorTranslationClientEnglish = {
 	["accessDeniedText"]: "You are not permitted to access this application.",
 	["clientAccessPolicyHint"]: "Without a policy, every identity in the realm may sign in.",
 	["consentStatusLoading"]: "Checking granted permissions…",
+	["deviceVerifyTitle"]: "Connect a device",
+	["deviceCodeLabel"]: "Code shown on your device",
+	["deviceCodeHint"]: "Enter the code exactly as displayed. Dashes and case do not matter.",
+	["deviceCodeInvalid"]: "The code is invalid or has expired. Check your device and try again.",
+	["deviceVerifyConfirmText"]: "{{client}} on another device is asking for access to your account.",
+	["deviceVerifyScopes"]: "It will be able to:",
+	["deviceVerifyApproved"]: "Device connected. You can close this page and return to your device.",
+	["deviceVerifyDenied"]: "Access denied. Nothing was connected; you can close this page.",
+	["deviceVerifyThrottled"]: "Too many attempts. Wait a few minutes and try again.",
 	["logoutConfirmTitle"]: "Sign out",
 	["logoutConfirmText"]: "Do you want to sign out?",
 	["logoutDone"]: "You have been signed out.",
@@ -792,6 +909,10 @@ const TranslatorTranslationEntityEnglish = {
 		one: "Key",
 		other: "Keys"
 	}),
+	["path"]: definePlural({
+		one: "Path",
+		other: "Paths"
+	}),
 	["permission"]: definePlural({
 		one: "Permission",
 		other: "Permissions"
@@ -873,6 +994,10 @@ const TranslatorTranslationErrorEnglish = {
 	[ErrorCode.OAUTH_RESPONSE_TYPE_UNSUPPORTED]: "The response type is not supported.",
 	[ErrorCode.OAUTH_SCOPE_INVALID]: "The requested scope is invalid.",
 	[ErrorCode.OAUTH_SCOPE_INSUFFICIENT]: "The granted scope is insufficient for this action.",
+	[ErrorCode.OAUTH_AUTHORIZATION_PENDING]: "The device has not been approved yet.",
+	[ErrorCode.OAUTH_SLOW_DOWN]: "The device is polling too frequently.",
+	[ErrorCode.OAUTH_DEVICE_CODE_EXPIRED]: "The device code has expired. Start again on your device.",
+	[ErrorCode.OAUTH_DEVICE_VERIFICATION_THROTTLED]: "Too many verification attempts. Please try again later.",
 	[ErrorCode.PERMISSION_NOT_FOUND]: "The permission could not be found.",
 	[ErrorCode.PERMISSION_DENIED]: "You do not have permission to perform this action.",
 	[ErrorCode.PERMISSION_EVALUATION_FAILED]: "The permission could not be evaluated.",
@@ -954,6 +1079,7 @@ const TranslatorTranslationFieldEnglish = {
 	["accessPolicy"]: "Access policy",
 	["actor"]: "Actor",
 	["ref"]: "Reference",
+	["parent"]: "Parent",
 	["path"]: "Path",
 	["method"]: "Method",
 	["use"]: "Usage",
@@ -1034,6 +1160,38 @@ const TranslatorTranslationAppGerman = {
 	["policyDescription"]: "Regeln, die bestimmen, wann eine Berechtigung gilt.",
 	["eventDescription"]: "Fortlaufendes Protokoll sicherheitsrelevanter Aktivitäten.",
 	["sessionDescription"]: "Aktive Anmeldungen mit den zugehörigen Geräten und Tokens.",
+	["pathDescription"]: "Ordner, die Benutzer und Clients innerhalb einer Organisation gliedern.",
+	["dashboard"]: "Dashboard",
+	["dashboardDescription"]: "Anmeldungen, Autorisierungen und Ereignisse dieser Organisation auf einen Blick.",
+	["dashboardWindow"]: "Zeitraum",
+	["dashboardWindow24h"]: "Letzte 24 Stunden",
+	["dashboardWindow7d"]: "Letzte 7 Tage",
+	["dashboardWindow30d"]: "Letzte 30 Tage",
+	["dashboardWindow90d"]: "Letzte 90 Tage",
+	["dashboardLogins"]: "Erfolgreiche Anmeldungen",
+	["dashboardLoginsFailed"]: "Fehlgeschlagene Anmeldungen",
+	["dashboardAuthorizations"]: "Autorisierungen",
+	["dashboardEvents"]: "Ereignisse",
+	["dashboardLoginVolume"]: "Anmeldungen im Zeitverlauf",
+	["dashboardEventsByType"]: "Ereignisse nach Typ",
+	["dashboardEventsLink"]: "Alle Ereignisse anzeigen",
+	["dashboardEmpty"]: "Keine Ereignisse in diesem Zeitraum.",
+	["dashboardEventLogDisabled"]: "Das Ereignisprotokoll ist deaktiviert. Es wird nichts aufgezeichnet und hier gibt es nichts anzuzeigen. Aktivieren Sie es mit EVENT_LOG_ENABLED.",
+	["dashboardIdentities"]: "Identitäten",
+	["dashboardConfiguration"]: "Konfiguration",
+	["sessionsActive"]: "Aktive Sitzungen",
+	["statsNew"]: "+{{count}} neu",
+	["statsNewInDays"]: "+{{count}} in {{days}} Tagen",
+	["statsNewInHours"]: "+{{count}} in {{hours}} Stunden",
+	["activityTotal"]: "Gesamt",
+	["activityCreated"]: "Erstellt",
+	["activityUpdated"]: "Aktualisiert",
+	["activityDeleted"]: "Gelöscht",
+	["activitySource"]: "Erstellt, aktualisiert und gelöscht werden aus dem Audit-Log gezählt.",
+	["activityInDays"]: "in {{days}} Tagen",
+	["activityInHours"]: "in {{hours}} Stunden",
+	["activityAllTime"]: "insgesamt",
+	["statsWindowRetained"]: "Das Audit-Log bewahrt diese Einträge {{days}} Tage auf.",
 	["setManagementRealm"]: "Als Verwaltungs-Realm festlegen",
 	["apiDocs"]: "API-Dokumentation",
 	["madeWith"]: "Erstellt mit",
@@ -1093,6 +1251,15 @@ const TranslatorTranslationAppGerman = {
 	["identityProviderLinkFailed"]: "Das Konto konnte nicht verbunden werden.",
 	["keyDeleteForceConfirmTitle"]: "Verschlüsselungsschlüssel unwiderruflich löschen?",
 	["keyDeleteForceConfirmDescription"]: "Dieser Schlüssel wird noch von {{count}} verschlüsselten Geheimnissen referenziert. Das Löschen macht sie dauerhaft unlesbar.",
+	["pathHint"]: "Rein organisatorisch. Ein Pfad beeinflusst weder Berechtigungen noch Rollen noch die Anmeldung.",
+	["pathScope"]: "Pfad",
+	["pathScopeAll"]: "Alle Pfade",
+	["pathScopeTruncated"]: "Dieser Ordner enthält zu viele Unterordner, um die Liste einzugrenzen, daher werden alle Einträge angezeigt.",
+	["pathScopeIncomplete"]: "Dieser Realm enthält zu viele Ordner, um alle anzuzeigen, daher ist der Baum unvollständig.",
+	["pathScopeFailed"]: "Der Ordner konnte nicht geladen werden, daher wird nichts angezeigt.",
+	["pathScopeMissing"]: "Dieser Ordner existiert nicht mehr, daher wird nichts angezeigt.",
+	["pathDeleteConfirmDescription"]: "Dies löscht {{paths}} Unterordner und hebt die Zuordnung von {{users}} Benutzern und {{clients}} Clients auf. Kein Benutzer und kein Client wird gelöscht. Diese Aktion kann nicht rückgängig gemacht werden.",
+	["pathDeleteConfirmUnknown"]: "Die Unterordner dieses Ordners werden gelöscht und die Zuordnung aller darin abgelegten Benutzer und Clients wird aufgehoben. Die Anzahl konnte nicht gelesen werden. Diese Aktion kann nicht rückgängig gemacht werden.",
 	["backToApp"]: "Zurück zu {{host}}"
 };
 //#endregion
@@ -1104,7 +1271,7 @@ const TranslatorTranslationClientGerman = {
 	["postLogoutRedirectURIHint"]: "URI-Muster, zu dem ein RP-initiierter Logout zurückleiten darf. Getrennt von den Login-Weiterleitungs-URIs. Ohne Eintrag endet der Logout immer auf der Bestätigungsseite.",
 	["baseUrlHint"]: "Adresse der Anwendung. Wird in der Kontokonsole als Link angezeigt. Ohne Eintrag erscheint nur der Name.",
 	["backchannelLogoutURIHint"]: "Endpunkt, der beim Ende einer Sitzung ein Logout-Token erhält (OIDC Back-Channel Logout). Eine http(s)-URL, keine Muster. Ohne Eintrag wird nichts gesendet.",
-	["grantTypesHint"]: "Schränkt ein, welche OAuth2-Grants dieser Client verwenden darf. Ohne Auswahl sind alle Grants erlaubt.",
+	["grantTypesHint"]: "Schränkt ein, welche OAuth2-Grants dieser Client verwenden darf. Ohne Auswahl sind alle Grants erlaubt. Der Device-Grant muss ausdrücklich aufgeführt sein; eine leere Liste aktiviert ihn nicht.",
 	["authMethod"]: "Authentifizierungsmethode",
 	["authMethodNone"]: "Keine",
 	["authMethodSecret"]: "Gemeinsames Geheimnis",
@@ -1195,6 +1362,15 @@ const TranslatorTranslationClientGerman = {
 	["accessDeniedText"]: "Sie sind nicht berechtigt, auf diese Anwendung zuzugreifen.",
 	["clientAccessPolicyHint"]: "Ohne Richtlinie darf sich jede Identität des Realms anmelden.",
 	["consentStatusLoading"]: "Gewährte Berechtigungen werden geprüft…",
+	["deviceVerifyTitle"]: "Gerät verbinden",
+	["deviceCodeLabel"]: "Auf deinem Gerät angezeigter Code",
+	["deviceCodeHint"]: "Gib den Code genau so ein, wie er angezeigt wird. Bindestriche und Groß- oder Kleinschreibung spielen keine Rolle.",
+	["deviceCodeInvalid"]: "Der Code ist ungültig oder abgelaufen. Prüfe dein Gerät und versuche es erneut.",
+	["deviceVerifyConfirmText"]: "{{client}} auf einem anderen Gerät bittet um Zugriff auf dein Konto.",
+	["deviceVerifyScopes"]: "Es erhält folgende Berechtigungen:",
+	["deviceVerifyApproved"]: "Gerät verbunden. Du kannst diese Seite schließen und zu deinem Gerät zurückkehren.",
+	["deviceVerifyDenied"]: "Zugriff verweigert. Es wurde nichts verbunden; du kannst diese Seite schließen.",
+	["deviceVerifyThrottled"]: "Zu viele Versuche. Warte ein paar Minuten und versuche es erneut.",
 	["logoutConfirmTitle"]: "Abmelden",
 	["logoutConfirmText"]: "Möchten Sie sich abmelden?",
 	["logoutDone"]: "Sie wurden abgemeldet.",
@@ -1304,6 +1480,10 @@ const TranslatorTranslationEntityGerman = {
 		one: "Schlüssel",
 		other: "Schlüssel"
 	}),
+	["path"]: definePlural({
+		one: "Pfad",
+		other: "Pfade"
+	}),
 	["permission"]: definePlural({
 		one: "Berechtigung",
 		other: "Berechtigungen"
@@ -1385,6 +1565,10 @@ const TranslatorTranslationErrorGerman = {
 	[ErrorCode.OAUTH_RESPONSE_TYPE_UNSUPPORTED]: "Der Response-Typ wird nicht unterstützt.",
 	[ErrorCode.OAUTH_SCOPE_INVALID]: "Der angeforderte Bereich ist ungültig.",
 	[ErrorCode.OAUTH_SCOPE_INSUFFICIENT]: "Der gewährte Bereich reicht für diese Aktion nicht aus.",
+	[ErrorCode.OAUTH_AUTHORIZATION_PENDING]: "Das Gerät wurde noch nicht freigegeben.",
+	[ErrorCode.OAUTH_SLOW_DOWN]: "Das Gerät fragt zu häufig an.",
+	[ErrorCode.OAUTH_DEVICE_CODE_EXPIRED]: "Der Gerätecode ist abgelaufen. Starte den Vorgang auf deinem Gerät erneut.",
+	[ErrorCode.OAUTH_DEVICE_VERIFICATION_THROTTLED]: "Zu viele Bestätigungsversuche. Bitte versuche es später erneut.",
 	[ErrorCode.PERMISSION_NOT_FOUND]: "Die Berechtigung konnte nicht gefunden werden.",
 	[ErrorCode.PERMISSION_DENIED]: "Du hast keine Berechtigung, diese Aktion auszuführen.",
 	[ErrorCode.PERMISSION_EVALUATION_FAILED]: "Die Berechtigung konnte nicht ausgewertet werden.",
@@ -1466,6 +1650,7 @@ const TranslatorTranslationFieldGerman = {
 	["accessPolicy"]: "Zugriffsrichtlinie",
 	["actor"]: "Akteur",
 	["ref"]: "Referenz",
+	["parent"]: "Übergeordnet",
 	["path"]: "Pfad",
 	["method"]: "Methode",
 	["use"]: "Verwendung",
@@ -1546,6 +1731,38 @@ const TranslatorTranslationAppFrench = {
 	["policyDescription"]: "Règles qui déterminent quand une permission s'applique.",
 	["eventDescription"]: "Journal d'audit inaltérable des activités liées à la sécurité.",
 	["sessionDescription"]: "Connexions actives, avec les appareils et jetons associés.",
+	["pathDescription"]: "Dossiers qui organisent les utilisateurs et les clients dans un domaine.",
+	["dashboard"]: "Tableau de bord",
+	["dashboardDescription"]: "Connexions, autorisations et événements de ce domaine en un coup d'œil.",
+	["dashboardWindow"]: "Période",
+	["dashboardWindow24h"]: "Dernières 24 heures",
+	["dashboardWindow7d"]: "7 derniers jours",
+	["dashboardWindow30d"]: "30 derniers jours",
+	["dashboardWindow90d"]: "90 derniers jours",
+	["dashboardLogins"]: "Connexions réussies",
+	["dashboardLoginsFailed"]: "Connexions échouées",
+	["dashboardAuthorizations"]: "Autorisations",
+	["dashboardEvents"]: "Événements",
+	["dashboardLoginVolume"]: "Connexions dans le temps",
+	["dashboardEventsByType"]: "Événements par type",
+	["dashboardEventsLink"]: "Voir tous les événements",
+	["dashboardEmpty"]: "Aucun événement sur cette période.",
+	["dashboardEventLogDisabled"]: "Le journal des événements est désactivé : rien n'est enregistré et il n'y a rien à afficher ici. Activez-le avec EVENT_LOG_ENABLED.",
+	["dashboardIdentities"]: "Identités",
+	["dashboardConfiguration"]: "Configuration",
+	["sessionsActive"]: "Sessions actives",
+	["statsNew"]: "Nouveaux : +{{count}}",
+	["statsNewInDays"]: "+{{count}} en {{days}} jours",
+	["statsNewInHours"]: "+{{count}} en {{hours}} heures",
+	["activityTotal"]: "Total",
+	["activityCreated"]: "Créés",
+	["activityUpdated"]: "Modifiés",
+	["activityDeleted"]: "Supprimés",
+	["activitySource"]: "Les créations, modifications et suppressions sont comptées d'après le journal d'audit.",
+	["activityInDays"]: "sur {{days}} jours",
+	["activityInHours"]: "sur {{hours}} heures",
+	["activityAllTime"]: "depuis toujours",
+	["statsWindowRetained"]: "Le journal d'audit conserve ces entrées {{days}} jours.",
 	["setManagementRealm"]: "Définir comme realm de gestion",
 	["apiDocs"]: "Documentation API",
 	["madeWith"]: "Fait avec",
@@ -1605,6 +1822,15 @@ const TranslatorTranslationAppFrench = {
 	["identityProviderLinkFailed"]: "Le compte n'a pas pu être connecté.",
 	["keyDeleteForceConfirmTitle"]: "Détruire la clé de chiffrement ?",
 	["keyDeleteForceConfirmDescription"]: "Cette clé est encore référencée par {{count}} secret(s) chiffré(s). Sa suppression les rendra définitivement irrécupérables.",
+	["pathHint"]: "Purement organisationnel. Un chemin n'affecte ni permission, ni rôle, ni connexion.",
+	["pathScope"]: "Chemin",
+	["pathScopeAll"]: "Tous les chemins",
+	["pathScopeTruncated"]: "Ce dossier contient trop de sous-dossiers pour restreindre la liste, donc toutes les lignes sont affichées.",
+	["pathScopeIncomplete"]: "Ce royaume contient trop de dossiers pour tous les afficher, donc l'arborescence est incomplète.",
+	["pathScopeFailed"]: "Le dossier n'a pas pu être chargé, donc rien n'est affiché.",
+	["pathScopeMissing"]: "Ce dossier n'existe plus, donc rien n'est affiché.",
+	["pathDeleteConfirmDescription"]: "Cette action supprime {{paths}} sous-dossiers et retire {{users}} utilisateurs et {{clients}} clients de leur dossier. Aucun utilisateur ni client n'est supprimé. Cette action est irréversible.",
+	["pathDeleteConfirmUnknown"]: "Les sous-dossiers de ce dossier sont supprimés et tous les utilisateurs et clients qui y sont classés en sont retirés. Les nombres n'ont pas pu être lus. Cette action est irréversible.",
 	["backToApp"]: "Retour vers {{host}}"
 };
 //#endregion
@@ -1616,7 +1842,7 @@ const TranslatorTranslationClientFrench = {
 	["postLogoutRedirectURIHint"]: "Modèle d’URI vers lequel une déconnexion initiée par le RP peut rediriger. Distinct des URI de redirection de connexion. Sans entrée, la déconnexion se termine toujours sur la page de confirmation.",
 	["baseUrlHint"]: "Adresse de l'application. Affichée comme lien dans la console de compte. Sans entrée, seul le nom apparaît.",
 	["backchannelLogoutURIHint"]: "Point de terminaison qui reçoit un jeton de déconnexion à la fin d'une session (OIDC Back-Channel Logout). Une URL http(s), sans modèle. Sans entrée, rien n'est envoyé.",
-	["grantTypesHint"]: "Restreint les types d’autorisation OAuth2 que ce client peut utiliser. Sans sélection, tous sont autorisés.",
+	["grantTypesHint"]: "Restreint les types d’autorisation OAuth2 que ce client peut utiliser. Sans sélection, tous sont autorisés. Le type d’autorisation pour appareils doit être listé explicitement ; une liste vide ne l’active pas.",
 	["authMethod"]: "Méthode d’authentification",
 	["authMethodNone"]: "Aucune",
 	["authMethodSecret"]: "Secret partagé",
@@ -1707,6 +1933,15 @@ const TranslatorTranslationClientFrench = {
 	["accessDeniedText"]: "Vous n'êtes pas autorisé à accéder à cette application.",
 	["clientAccessPolicyHint"]: "Sans politique, toute identité du domaine peut se connecter.",
 	["consentStatusLoading"]: "Vérification des permissions accordées…",
+	["deviceVerifyTitle"]: "Connecter un appareil",
+	["deviceCodeLabel"]: "Code affiché sur votre appareil",
+	["deviceCodeHint"]: "Saisissez le code exactement tel qu'il est affiché. Les tirets et la casse n'ont pas d'importance.",
+	["deviceCodeInvalid"]: "Le code est invalide ou a expiré. Vérifiez votre appareil et réessayez.",
+	["deviceVerifyConfirmText"]: "{{client}} sur un autre appareil demande l'accès à votre compte.",
+	["deviceVerifyScopes"]: "Il pourra :",
+	["deviceVerifyApproved"]: "Appareil connecté. Vous pouvez fermer cette page et retourner à votre appareil.",
+	["deviceVerifyDenied"]: "Accès refusé. Rien n'a été connecté ; vous pouvez fermer cette page.",
+	["deviceVerifyThrottled"]: "Trop de tentatives. Attendez quelques minutes et réessayez.",
 	["logoutConfirmTitle"]: "Se déconnecter",
 	["logoutConfirmText"]: "Voulez-vous vous déconnecter ?",
 	["logoutDone"]: "Vous avez été déconnecté.",
@@ -1816,6 +2051,10 @@ const TranslatorTranslationEntityFrench = {
 		one: "Clé",
 		other: "Clés"
 	}),
+	["path"]: definePlural({
+		one: "Chemin",
+		other: "Chemins"
+	}),
 	["permission"]: definePlural({
 		one: "Permission",
 		other: "Permissions"
@@ -1897,6 +2136,10 @@ const TranslatorTranslationErrorFrench = {
 	[ErrorCode.OAUTH_RESPONSE_TYPE_UNSUPPORTED]: "Le type de réponse n'est pas pris en charge.",
 	[ErrorCode.OAUTH_SCOPE_INVALID]: "La portée demandée est invalide.",
 	[ErrorCode.OAUTH_SCOPE_INSUFFICIENT]: "La portée accordée est insuffisante pour cette action.",
+	[ErrorCode.OAUTH_AUTHORIZATION_PENDING]: "L'appareil n'a pas encore été approuvé.",
+	[ErrorCode.OAUTH_SLOW_DOWN]: "L'appareil interroge le serveur trop fréquemment.",
+	[ErrorCode.OAUTH_DEVICE_CODE_EXPIRED]: "Le code de l'appareil a expiré. Recommencez sur votre appareil.",
+	[ErrorCode.OAUTH_DEVICE_VERIFICATION_THROTTLED]: "Trop de tentatives de vérification. Veuillez réessayer plus tard.",
 	[ErrorCode.PERMISSION_NOT_FOUND]: "La permission est introuvable.",
 	[ErrorCode.PERMISSION_DENIED]: "Vous n'avez pas la permission d'effectuer cette action.",
 	[ErrorCode.PERMISSION_EVALUATION_FAILED]: "La permission n'a pas pu être évaluée.",
@@ -1978,6 +2221,7 @@ const TranslatorTranslationFieldFrench = {
 	["accessPolicy"]: "Politique d'accès",
 	["actor"]: "Acteur",
 	["ref"]: "Référence",
+	["parent"]: "Parent",
 	["path"]: "Chemin",
 	["method"]: "Méthode",
 	["use"]: "Utilisation",
@@ -2058,6 +2302,38 @@ const TranslatorTranslationAppSpanish = {
 	["policyDescription"]: "Reglas que deciden cuándo se aplica un permiso.",
 	["eventDescription"]: "Registro de auditoría inalterable de la actividad de seguridad.",
 	["sessionDescription"]: "Inicios de sesión activos, con los dispositivos y tokens asociados.",
+	["pathDescription"]: "Carpetas que organizan usuarios y clientes dentro de un dominio.",
+	["dashboard"]: "Panel",
+	["dashboardDescription"]: "Inicios de sesión, autorizaciones y eventos de este dominio de un vistazo.",
+	["dashboardWindow"]: "Período",
+	["dashboardWindow24h"]: "Últimas 24 horas",
+	["dashboardWindow7d"]: "Últimos 7 días",
+	["dashboardWindow30d"]: "Últimos 30 días",
+	["dashboardWindow90d"]: "Últimos 90 días",
+	["dashboardLogins"]: "Inicios de sesión correctos",
+	["dashboardLoginsFailed"]: "Inicios de sesión fallidos",
+	["dashboardAuthorizations"]: "Autorizaciones",
+	["dashboardEvents"]: "Eventos",
+	["dashboardLoginVolume"]: "Inicios de sesión a lo largo del tiempo",
+	["dashboardEventsByType"]: "Eventos por tipo",
+	["dashboardEventsLink"]: "Ver todos los eventos",
+	["dashboardEmpty"]: "No hay eventos en este período.",
+	["dashboardEventLogDisabled"]: "El registro de eventos está desactivado: no se graba nada y no hay nada que mostrar aquí. Actívelo con EVENT_LOG_ENABLED.",
+	["dashboardIdentities"]: "Identidades",
+	["dashboardConfiguration"]: "Configuración",
+	["sessionsActive"]: "Sesiones activas",
+	["statsNew"]: "Nuevos: +{{count}}",
+	["statsNewInDays"]: "+{{count}} en {{days}} días",
+	["statsNewInHours"]: "+{{count}} en {{hours}} horas",
+	["activityTotal"]: "Total",
+	["activityCreated"]: "Creados",
+	["activityUpdated"]: "Actualizados",
+	["activityDeleted"]: "Eliminados",
+	["activitySource"]: "Las creaciones, actualizaciones y eliminaciones se cuentan a partir del registro de auditoría.",
+	["activityInDays"]: "en {{days}} días",
+	["activityInHours"]: "en {{hours}} horas",
+	["activityAllTime"]: "desde siempre",
+	["statsWindowRetained"]: "El registro de auditoría conserva estas entradas {{days}} días.",
 	["setManagementRealm"]: "Establecer como realm de gestión",
 	["apiDocs"]: "Documentación de la API",
 	["madeWith"]: "Hecho con",
@@ -2117,6 +2393,15 @@ const TranslatorTranslationAppSpanish = {
 	["identityProviderLinkFailed"]: "La cuenta no pudo ser conectada.",
 	["keyDeleteForceConfirmTitle"]: "¿Destruir la clave de cifrado?",
 	["keyDeleteForceConfirmDescription"]: "Esta clave todavía es referenciada por {{count}} secreto(s) cifrado(s). Eliminarla los hará permanentemente irrecuperables.",
+	["pathHint"]: "Solo organizativo. Una ruta no afecta permisos, roles ni el inicio de sesión.",
+	["pathScope"]: "Ruta",
+	["pathScopeAll"]: "Todas las rutas",
+	["pathScopeTruncated"]: "Esta carpeta contiene demasiadas subcarpetas para acotar la lista, por lo que se muestran todas las filas.",
+	["pathScopeIncomplete"]: "Este dominio contiene demasiadas carpetas para mostrarlas todas, por lo que el árbol está incompleto.",
+	["pathScopeFailed"]: "No se pudo cargar la carpeta, por lo que no se muestra nada.",
+	["pathScopeMissing"]: "Esta carpeta ya no existe, por lo que no se muestra nada.",
+	["pathDeleteConfirmDescription"]: "Esto elimina {{paths}} subcarpetas y desarchiva {{users}} usuarios y {{clients}} clientes. No se elimina ningún usuario ni cliente. Esta acción no se puede deshacer.",
+	["pathDeleteConfirmUnknown"]: "Las subcarpetas de esta carpeta se eliminan y todos los usuarios y clientes archivados en ellas quedan sin carpeta. No se pudieron leer los recuentos. Esta acción no se puede deshacer.",
 	["backToApp"]: "Volver a {{host}}"
 };
 //#endregion
@@ -2128,7 +2413,7 @@ const TranslatorTranslationClientSpanish = {
 	["postLogoutRedirectURIHint"]: "Patrón de URI al que puede redirigir un cierre de sesión iniciado por el RP. Independiente de las URI de redirección de inicio de sesión. Sin entradas, el cierre de sesión termina siempre en la página de confirmación.",
 	["baseUrlHint"]: "Dirección de la aplicación. Se muestra como enlace en la consola de cuenta. Sin entrada, solo aparece el nombre.",
 	["backchannelLogoutURIHint"]: "Punto final que recibe un token de cierre de sesión cuando termina una sesión (OIDC Back-Channel Logout). Una URL http(s), sin patrones. Sin entrada, no se envía nada.",
-	["grantTypesHint"]: "Restringe qué concesiones OAuth2 puede usar este cliente. Sin selección, se permiten todas.",
+	["grantTypesHint"]: "Restringe qué concesiones OAuth2 puede usar este cliente. Sin selección, se permiten todas. La concesión para dispositivos debe indicarse explícitamente; una lista vacía no la habilita.",
 	["authMethod"]: "Método de autenticación",
 	["authMethodNone"]: "Ninguno",
 	["authMethodSecret"]: "Secreto compartido",
@@ -2219,6 +2504,15 @@ const TranslatorTranslationClientSpanish = {
 	["accessDeniedText"]: "No tienes permiso para acceder a esta aplicación.",
 	["clientAccessPolicyHint"]: "Sin política, cualquier identidad del realm puede iniciar sesión.",
 	["consentStatusLoading"]: "Comprobando los permisos concedidos…",
+	["deviceVerifyTitle"]: "Conectar un dispositivo",
+	["deviceCodeLabel"]: "Código mostrado en tu dispositivo",
+	["deviceCodeHint"]: "Introduce el código exactamente como se muestra. Los guiones y las mayúsculas no importan.",
+	["deviceCodeInvalid"]: "El código no es válido o ha caducado. Revisa tu dispositivo e inténtalo de nuevo.",
+	["deviceVerifyConfirmText"]: "{{client}} en otro dispositivo solicita acceso a tu cuenta.",
+	["deviceVerifyScopes"]: "Podrá:",
+	["deviceVerifyApproved"]: "Dispositivo conectado. Puedes cerrar esta página y volver a tu dispositivo.",
+	["deviceVerifyDenied"]: "Acceso denegado. No se conectó nada; puedes cerrar esta página.",
+	["deviceVerifyThrottled"]: "Demasiados intentos. Espera unos minutos e inténtalo de nuevo.",
 	["logoutConfirmTitle"]: "Cerrar sesión",
 	["logoutConfirmText"]: "¿Quieres cerrar sesión?",
 	["logoutDone"]: "Has cerrado sesión.",
@@ -2328,6 +2622,10 @@ const TranslatorTranslationEntitySpanish = {
 		one: "Clave",
 		other: "Claves"
 	}),
+	["path"]: definePlural({
+		one: "Ruta",
+		other: "Rutas"
+	}),
 	["permission"]: definePlural({
 		one: "Permiso",
 		other: "Permisos"
@@ -2409,6 +2707,10 @@ const TranslatorTranslationErrorSpanish = {
 	[ErrorCode.OAUTH_RESPONSE_TYPE_UNSUPPORTED]: "El tipo de respuesta no es compatible.",
 	[ErrorCode.OAUTH_SCOPE_INVALID]: "El ámbito solicitado no es válido.",
 	[ErrorCode.OAUTH_SCOPE_INSUFFICIENT]: "El ámbito concedido es insuficiente para esta acción.",
+	[ErrorCode.OAUTH_AUTHORIZATION_PENDING]: "El dispositivo aún no ha sido aprobado.",
+	[ErrorCode.OAUTH_SLOW_DOWN]: "El dispositivo consulta con demasiada frecuencia.",
+	[ErrorCode.OAUTH_DEVICE_CODE_EXPIRED]: "El código del dispositivo ha caducado. Vuelva a empezar en su dispositivo.",
+	[ErrorCode.OAUTH_DEVICE_VERIFICATION_THROTTLED]: "Demasiados intentos de verificación. Inténtelo de nuevo más tarde.",
 	[ErrorCode.PERMISSION_NOT_FOUND]: "No se pudo encontrar el permiso.",
 	[ErrorCode.PERMISSION_DENIED]: "No tiene permiso para realizar esta acción.",
 	[ErrorCode.PERMISSION_EVALUATION_FAILED]: "No se pudo evaluar el permiso.",
@@ -2490,6 +2792,7 @@ const TranslatorTranslationFieldSpanish = {
 	["accessPolicy"]: "Política de acceso",
 	["actor"]: "Actor",
 	["ref"]: "Referencia",
+	["parent"]: "Superior",
 	["path"]: "Ruta",
 	["method"]: "Método",
 	["use"]: "Uso",