@data-club/ai-hub 0.0.1

package/src/auth/texts.ts

@@ -0,0 +1,1294 @@
+/**
+ * `AIHubTexts` — the user-facing-string surface for every built-in screen.
+ *
+ * Per-customer wrappers pass a localized object via `texts` (on
+ * `<DataClubAIHub />` and on the standalone auth components); the components
+ * fall back to the English defaults for any key the wrapper omits. Step 8
+ * defines the auth-screen keys; Step 9 + Step 10 + Step 11 + Step 12 extend
+ * the map as their own screens land.
+ *
+ * Conventions:
+ *
+ * - Keys are namespaced (`login.signInButton`, `changePassword.saveButton`).
+ *   The namespace is the screen / surface; the leaf is what the string is for.
+ * - **Defaults are English** — wrappers can ship any locale by passing
+ *   `texts={{ login: { signInButton: "Přihlásit se" } }}` and so on.
+ * - Defaults are exported as a frozen object so a careless caller mutating
+ *   them blows up loudly in dev instead of poisoning every render after.
+ *
+ * @see SPECIFICATIONS.md §7.2.1 — login props (texts is wrapper-localized)
+ * @see SPECIFICATIONS.md §7.3 — `<DataClubAIHub />` texts forwarding
+ * @see ui-sketches/01-login.md — the strings on the login card
+ * @see ui-sketches/02-change-password.md — the strings on the change-password card
+ */
+
+/**
+ * User-facing strings on `<DataClubAIHubLogin />`. Every string the screen
+ * renders has a key here so wrappers can localize without forking the
+ * component.
+ */
+export interface AIHubLoginTexts {
+  /** Label above the username input. */
+  usernameLabel: string;
+  /** Label above the password input. */
+  passwordLabel: string;
+  /** Submit-button label (idle). */
+  signInButton: string;
+  /** Submit-button label while the request is in flight. */
+  signingInButton: string;
+  /**
+   * Footer note below the sign-in button — v1 has no self-serve reset
+   * (§8.5), this is the user-visible instruction. Plain text, not a link.
+   */
+  forgotPasswordNote: string;
+  /** `aria-label` on the show/hide-password toggle when the password is hidden. */
+  showPasswordAriaLabel: string;
+  /** `aria-label` on the show/hide-password toggle when the password is shown. */
+  hidePasswordAriaLabel: string;
+  /** Banner shown on a 401 from `/auth/login`. */
+  invalidCredentialsError: string;
+  /** Banner shown on a transport / network failure. */
+  networkError: string;
+}
+
+/**
+ * User-facing strings on `<DataClubAIHubChangePassword />` (both the forced
+ * and the voluntary variants).
+ */
+export interface AIHubChangePasswordTexts {
+  /** Card title at the top. */
+  title: string;
+  /** Intro message shown only on the forced variant. */
+  forcedChangePasswordIntro: string;
+  /** Label for the (voluntary-only) current-password field. */
+  currentPasswordLabel: string;
+  /** Label for the new-password field. */
+  newPasswordLabel: string;
+  /** Label for the confirm-password field. */
+  confirmPasswordLabel: string;
+  /** Submit button (idle). */
+  changePasswordButton: string;
+  /** Submit button while saving. */
+  savingButton: string;
+  /** Voluntary-only cancel button. */
+  cancelButton: string;
+  /** Inline error: confirm-password doesn't match new-password. */
+  passwordsMustMatchError: string;
+  /** Inline error: new-password shorter than the minimum length. */
+  passwordTooShortError: string;
+  /**
+   * Inline error: new-password fails the §8.5 complexity rule (≥2 of
+   * letters, digits, special characters).
+   */
+  passwordTooSimpleError: string;
+  /** Banner shown when the server rejects the current password (voluntary). */
+  invalidCurrentPasswordError: string;
+  /** Banner shown on a transport / network failure. */
+  networkError: string;
+  /** `aria-label` on the show/hide-password toggle when the password is hidden. */
+  showPasswordAriaLabel: string;
+  /** `aria-label` on the show/hide-password toggle when the password is shown. */
+  hidePasswordAriaLabel: string;
+}
+
+/**
+ * User-facing strings on the chat surface — agents picker, sessions panel,
+ * chat header, message list, input. Step 9 ships the structural-layout
+ * keys; Step 10 will add the affordance keys (TPM banner, theme switcher,
+ * tool-call card, etc.).
+ *
+ * @see ui-sketches/03-chat.md
+ */
+export interface AIHubChatTexts {
+  /** Heading on the agents picker. */
+  agentsPickerHeading: string;
+  /**
+   * Subtitle template — `{count}` is replaced with the per-caller session
+   * count. Pluralization is handled by the wrapper if needed.
+   */
+  agentCardSessionsSubtitle: string;
+  /** Subtitle on agent cards with zero sessions yet. */
+  agentCardNoSessionsSubtitle: string;
+  /** Empty-state heading when the deployment has zero non-archived agents. */
+  agentsPickerEmptyHeading: string;
+  /** Empty-state body. */
+  agentsPickerEmptyBody: string;
+  /** Loading line shown on the agents picker while `/agents` is in flight. */
+  agentsPickerLoading: string;
+  /** Error banner on the agents picker when `/agents` fails. */
+  agentsPickerError: string;
+  /** Loading line on the sessions list. */
+  sessionsLoading: string;
+  /** Empty-state line when the user has no sessions for the open agent. */
+  sessionsEmpty: string;
+  /** "+ New chat" button label on the sessions panel. */
+  newSessionButton: string;
+  /** Sessions-panel "Show archived" filter label. */
+  showArchivedToggle: string;
+  /** Sessions-panel "Hide archived" filter label. */
+  hideArchivedToggle: string;
+  /** `aria-label` for the row's edit-title button. */
+  editSessionTitleAriaLabel: string;
+  /** `aria-label` for the row's archive button. */
+  archiveSessionAriaLabel: string;
+  /** `aria-label` for the row's unarchive button (archived view only). */
+  unarchiveSessionAriaLabel: string;
+  /**
+   * Archive-row `confirm()` text — `{title}` is replaced with the session
+   * title.
+   */
+  archiveConfirmPrompt: string;
+  /** `aria-label` for the sessions-panel collapse button. */
+  collapseSessionsPanel: string;
+  /** `aria-label` for the sessions-panel reveal button (collapsed state). */
+  expandSessionsPanel: string;
+  /** `[← Agents]` back-to-picker link in the chat header. */
+  backToAgentsLink: string;
+  /** Fallback title for a session somehow rendered without one. */
+  untitledSessionFallback: string;
+  /** Body shown when no session is selected yet. */
+  noActiveSessionHint: string;
+  /** Body shown when the user opens a session with zero messages. */
+  emptyConversationHint: string;
+  /** Placeholder inside the input textarea. */
+  inputPlaceholder: string;
+  /** Send-button label. */
+  sendButton: string;
+  /** Stop-button label (generic — Step 10 adds phase-specific labels). */
+  stopButton: string;
+  /**
+   * Stop-button label shown from the moment the user clicks Stop until
+   * the server delivers `stream_end{cancelled}` — typically a few
+   * hundred ms while Letta winds the run down.
+   */
+  stoppingButton: string;
+  /** `aria-label` on the send button. */
+  sendButtonAriaLabel: string;
+  /** `aria-label` on the stop button. */
+  stopButtonAriaLabel: string;
+  /** Modal title — new-session flow. */
+  newSessionModalTitle: string;
+  /** Modal title — edit-session-title flow. */
+  editSessionModalTitle: string;
+  /** Label above the chat-title input in the modal. */
+  sessionTitleLabel: string;
+  /** Placeholder text inside the chat-title input. */
+  sessionTitlePlaceholder: string;
+  /** Inline validation: title required (empty submit). */
+  sessionTitleRequiredError: string;
+  /** Inline validation: title too long (>80 chars). */
+  sessionTitleTooLongError: string;
+  /** Modal cancel button. */
+  modalCancelButton: string;
+  /** Modal create button (new-session). */
+  modalCreateButton: string;
+  /** Modal save button (edit-title). */
+  modalSaveButton: string;
+  /** Generic banner when a session / chat / agents request fails. */
+  genericRequestError: string;
+  /**
+   * Surfaced in `<MessageList />` when a turn ends without the agent
+   * producing any assistant output (no `assistant_delta`, no
+   * `assistant_message_complete`) AND without an explicit `error` event.
+   * Catches the "API key wrong / provider returned empty" case.
+   */
+  noAssistantResponseError: string;
+  /** User-menu sign-out item label (minimal Step 9 user menu). */
+  signOutMenuItem: string;
+
+  /* ── Step 10 — affordance keys ─────────────────────────────────── */
+  /** Stop-button label during model-text / model-reasoning / etc. phases. */
+  stopGenerationButton: string;
+  /** Stop-button label during `tool_executing` phase. */
+  cancelToolButton: string;
+  /** Generic system-notice "Resumed." flash text. */
+  systemResumedText: string;
+  /**
+   * TPM-banner body during `waiting_provider`. `{seconds}` is replaced
+   * with the remaining countdown.
+   */
+  tpmWaitText: string;
+  /** TPM-banner body when recovery exhausted. */
+  tpmExhaustedText: string;
+  /** TPM-banner retry button. */
+  tpmRetryButton: string;
+  /** Generic stream-error banner body for `--failed` assistant bubbles. */
+  streamFailedText: string;
+  /** Retry button on `--failed` bubbles. */
+  retryFailedButton: string;
+  /** "Stopped" stamp on cancelled bubbles. */
+  cancelledStampText: string;
+  /** `[↓ Jump to latest]` scroll-to-present button. */
+  scrollToPresentButton: string;
+  /**
+   * Reasoning view collapsed-header text WITH a known duration.
+   * `{seconds}` is replaced with the elapsed seconds (e.g. `3.2`).
+   * Used during streaming and on historical bubbles that recorded a
+   * duration; the no-duration variant is used otherwise.
+   */
+  reasoningCollapsedHeader: string;
+  /**
+   * Reasoning view collapsed-header text when no duration is known —
+   * e.g. on historical bubbles where the wire shape doesn't carry a
+   * duration. Should NOT contain `{seconds}`.
+   */
+  reasoningCollapsedHeaderNoDuration: string;
+  /** Reasoning view expanded-header text — same `{seconds}` rules. */
+  reasoningExpandedHeader: string;
+  /** Reasoning view expanded-header text when no duration is known. */
+  reasoningExpandedHeaderNoDuration: string;
+  /** Reasoning view expand-button `aria-label`. */
+  reasoningExpandAriaLabel: string;
+  /** Reasoning view collapse-button `aria-label`. */
+  reasoningCollapseAriaLabel: string;
+  /** Reasoning view "thinking…" placeholder while deltas are arriving. */
+  reasoningThinkingPlaceholder: string;
+  /** Tool-call card header — `running` state. */
+  toolCallRunningStatus: string;
+  /** Tool-call card header — `done` state. */
+  toolCallDoneStatus: string;
+  /** Tool-call card header — `error` state. */
+  toolCallErrorStatus: string;
+  /** Tool-call card "Input:" section label. */
+  toolCallInputLabel: string;
+  /** Tool-call card "Output:" section label. */
+  toolCallOutputLabel: string;
+  /** Tool-call card "Error:" section label. */
+  toolCallErrorLabel: string;
+  /** Tool-call card expand-button `aria-label`. */
+  toolCallExpandAriaLabel: string;
+  /** Tool-call card collapse-button `aria-label`. */
+  toolCallCollapseAriaLabel: string;
+  /** Effort dropdown label. */
+  effortLabel: string;
+  /** Effort dropdown — None. */
+  effortNone: string;
+  /** Effort dropdown — Minimal. */
+  effortMinimal: string;
+  /** Effort dropdown — Low. */
+  effortLow: string;
+  /** Effort dropdown — Medium. */
+  effortMedium: string;
+  /** Effort dropdown — High. */
+  effortHigh: string;
+  /** Effort dropdown — Extra High. */
+  effortExtraHigh: string;
+  /** Theme switcher — visible label when current theme is light. */
+  themeDarkLabel: string;
+  /** Theme switcher — visible label when current theme is dark. */
+  themeLightLabel: string;
+  /** Theme switcher — `aria-label` when current theme is light. */
+  themeSwitchToDarkAriaLabel: string;
+  /** Theme switcher — `aria-label` when current theme is dark. */
+  themeSwitchToLightAriaLabel: string;
+
+  /* ── Step 11 — user-menu admin entries ─────────────────────────── */
+  /** User-menu "Admin" item label (only rendered for `role >= power_user`). */
+  adminMenuItem: string;
+  /**
+   * User-menu "Open Letta ADE ↗" item label — opens the deployment's Letta
+   * ADE in a new browser tab. Only rendered for `role >= power_user`.
+   */
+  openLettaAdeMenuItem: string;
+}
+
+/**
+ * User-facing strings on `<DataClubAIHubAdmin />` — the role-gated admin UI
+ * mounted under the same shell as chat (§7.1, §8.3, [04-admin-overview.md]).
+ *
+ * Step 11 fills in the shell + Users sub-page strings; Step 12 will extend
+ * this map with `agents.*`, `sessionsOverview.*`, and `settings.*` keys
+ * without touching the existing keys (wrappers stay forward-compatible).
+ *
+ * @see ui-sketches/04-admin-overview.md
+ * @see ui-sketches/05-admin-users.md
+ */
+export interface AIHubAdminTexts {
+  /** `admin_nav` section heading shown above the nav list. */
+  navHeading: string;
+  /** Nav item label — Users sub-page (visible to admin / super_admin). */
+  navUsers: string;
+  /** Nav item label — Agents sub-page (visible to power_user and above). */
+  navAgents: string;
+  /** Nav item label — Sessions overview sub-page (visible to power_user and above). */
+  navSessionsOverview: string;
+  /** Nav item label — Rotating messages sub-page (visible to power_user and above). */
+  navRotatingMessages: string;
+  /** Nav item label — Settings sub-page (super_admin only). */
+  navSettings: string;
+  /**
+   * "← Back to chat" link at the bottom of the admin nav. Surfaces when
+   * the admin shell is mounted inside `<DataClubAIHub />` (the monolith
+   * passes an `onExit` callback that swaps the view); Tier-3 wrappers
+   * mounting the admin on its own route can omit `onExit` and the link
+   * stays hidden.
+   */
+  backToChatLink: string;
+  /**
+   * @deprecated Unused since Step 12 landed the real Agents / Sessions
+   * overview / Settings pages. Retained in the interface so per-customer
+   * wrappers that overrode the string don't get a type error on upgrade;
+   * remove in v2.
+   */
+  comingInStep12Placeholder: string;
+
+  /* ── Users sub-page ([05-admin-users.md]) ─────────────────────── */
+  /** Page heading on the Users sub-page. */
+  usersHeading: string;
+  /** "+ Create user" button label (top-right). */
+  createUserButton: string;
+  /** `users_table` column header — Username. */
+  userColumnUsername: string;
+  /** `users_table` column header — Display name. */
+  userColumnDisplay: string;
+  /** `users_table` column header — Role. */
+  userColumnRole: string;
+  /** `users_table` column header — Actions. */
+  userColumnActions: string;
+  /** Loading placeholder for the table. */
+  usersLoading: string;
+  /** Empty placeholder when the deployment somehow has zero users. */
+  usersEmpty: string;
+  /** Generic banner shown when `/admin/users` fails. */
+  usersGenericError: string;
+  /** `aria-label` for the per-row reset-password button. */
+  resetPasswordButtonLabel: string;
+  /** `aria-label` for the per-row delete button. */
+  deleteUserButtonLabel: string;
+  /** Tooltip / sr-only text on a row's `[role▼]` when admin-shield disables it. */
+  roleSelectShieldDisabledHint: string;
+  /** Tooltip / sr-only text on a row's `[role▼]` when min-count disables it. */
+  roleSelectMinCountDisabledHint: string;
+  /**
+   * Banner text shown after a server 403 on a role change — message comes
+   * from the server but we provide a fallback so empty messages don't
+   * leave the user staring at a silent revert.
+   */
+  roleChangeForbiddenFallback: string;
+  /** Toast / inline success message after a successful role change. `{role}` is interpolated. */
+  roleChangeSuccessToast: string;
+  /** Visual marker text appended to a row whose `is_initial_password === true`. */
+  initialPasswordIndicator: string;
+  /** Role option labels (used in the dropdowns). */
+  roleOptionUser: string;
+  /** Role option labels (used in the dropdowns). */
+  roleOptionPowerUser: string;
+  /** Role option labels (used in the dropdowns). */
+  roleOptionAdmin: string;
+  /** Role option labels (used in the dropdowns). */
+  roleOptionSuperAdmin: string;
+
+  /* ── Create user modal (Phase 1 — form). */
+  /** Modal title. */
+  createUserModalTitle: string;
+  /** Label above the username input. */
+  createUserUsernameLabel: string;
+  /** Label above the display-name input (optional). */
+  createUserDisplayLabel: string;
+  /** Label above the role dropdown. */
+  createUserRoleLabel: string;
+  /** Cancel button. */
+  createUserCancelButton: string;
+  /** Submit button. */
+  createUserSubmitButton: string;
+  /** Submit button while the request is in flight. */
+  createUserSubmittingButton: string;
+  /** Inline validation: username required. */
+  createUserUsernameRequiredError: string;
+  /** Banner: server returned 409 `username_taken`. */
+  createUserUsernameTakenError: string;
+  /** Generic banner for any other create error. */
+  createUserGenericError: string;
+
+  /* ── Password reveal modal (Phase 2 — reused for reset). */
+  /** Title shown immediately after a successful create. */
+  passwordRevealCreateTitle: string;
+  /** Title shown after a successful reset. */
+  passwordRevealResetTitle: string;
+  /** Warning callout above the password field. */
+  passwordRevealWarning: string;
+  /** Label above the username read-only field. */
+  passwordRevealUsernameLabel: string;
+  /** Label above the password read-only field. */
+  passwordRevealPasswordLabel: string;
+  /** `aria-label` for the copy-to-clipboard button. */
+  passwordRevealCopyAriaLabel: string;
+  /** Visual confirmation that briefly flashes after a successful copy. */
+  passwordRevealCopiedFlash: string;
+  /** Dismiss button. The modal MUST be explicitly closed. */
+  passwordRevealDoneButton: string;
+
+  /* ── Reset password modal (Phase 1 — confirm). */
+  /** Modal title; `{username}` is interpolated. */
+  resetPasswordModalTitle: string;
+  /** Modal body explaining what the action does. */
+  resetPasswordModalBody: string;
+  /** Cancel button (no server call). */
+  resetPasswordCancelButton: string;
+  /** Confirm button — kicks off the reset. */
+  resetPasswordConfirmButton: string;
+  /** Confirm button while the request is in flight. */
+  resetPasswordConfirmingButton: string;
+  /** Generic banner shown when the reset request fails. */
+  resetPasswordGenericError: string;
+
+  /* ── Delete user confirmation (native `confirm()` prompt). */
+  /** `window.confirm` prompt body; `{username}` is interpolated. */
+  deleteUserConfirmPrompt: string;
+  /** Generic banner shown when delete fails. */
+  deleteUserGenericError: string;
+
+  /* ── Step 12 — Agents sub-page ([06-admin-agents.md]) ─────────── */
+  /** Page heading. */
+  agentsHeading: string;
+  /** Top-right `+ Create agent` button label. */
+  createAgentButton: string;
+  /** Top-right `[↗ Open Letta ADE]` button label. Same gate as the user-menu item. */
+  openLettaAdeButton: string;
+  /** `agents_table` column header — display name. */
+  agentColumnName: string;
+  /** `agents_table` column header — Letta `agent_id`. */
+  agentColumnLettaId: string;
+  /** `agents_table` column header — status. */
+  agentColumnStatus: string;
+  /** `agents_table` column header — actions. */
+  agentColumnActions: string;
+  /** Loading placeholder. */
+  agentsLoading: string;
+  /** Empty placeholder when the deployment has zero agents. */
+  agentsEmpty: string;
+  /** Generic banner shown when `/admin/agents` fails. */
+  agentsGenericError: string;
+  /** Status pill text — active row. */
+  agentStatusActive: string;
+  /** Status pill text — archived row. */
+  agentStatusArchived: string;
+  /** Per-row `[Edit]` button label. */
+  agentEditButton: string;
+  /** Per-row `[Archive]` button label. */
+  agentArchiveButton: string;
+  /** Per-row `[Unarchive]` button label. */
+  agentUnarchiveButton: string;
+  /** Bottom-of-table `[☐ Show archived]` toggle label. */
+  agentShowArchivedToggle: string;
+  /**
+   * Footer note explaining that model / provider / system prompt are not
+   * editable here — the link to Letta's ADE is the place for that.
+   */
+  agentsAdeFootnote: string;
+  /**
+   * `window.confirm` prompt body for archive; `{name}` is interpolated.
+   */
+  agentArchiveConfirmPrompt: string;
+
+  /* ── Create / edit agent modals ([06-admin-agents.md]). */
+  /** Create-modal title. */
+  createAgentModalTitle: string;
+  /** Edit-modal title; `{name}` is interpolated. */
+  editAgentModalTitle: string;
+  /** Label above the display-name input. */
+  agentNameLabel: string;
+  /** Helper text below the display-name input (visible-to-users hint). */
+  agentNameHelper: string;
+  /** Label above the Letta-agent-id input. */
+  agentLettaIdLabel: string;
+  /** Helper text below the Letta-agent-id input (find-this-in-ADE hint). */
+  agentLettaIdHelper: string;
+  /** Helper text on the edit modal warning about re-pointing semantics. */
+  agentLettaIdReassignHelper: string;
+  /** Cancel button. */
+  agentModalCancelButton: string;
+  /** Modal create button. */
+  agentModalCreateButton: string;
+  /** Modal save button. */
+  agentModalSaveButton: string;
+  /** Submit button while the request is in flight. */
+  agentModalSubmittingButton: string;
+  /** Inline validation: display name required. */
+  agentNameRequiredError: string;
+  /** Inline validation: Letta-agent-id required. */
+  agentLettaIdRequiredError: string;
+  /** Inline validation: server returned `letta_agent_not_found`. */
+  agentLettaIdNotFoundError: string;
+  /** Generic banner shown on other create / edit errors. */
+  agentSubmitGenericError: string;
+
+  /* ── Step 12.5 — specialized agents (sandbox + fork) ───────────────── */
+  /** Sub-heading above the optional fields. */
+  agentSpecializedSectionHeading: string;
+  /** Helper paragraph below the sub-heading. */
+  agentSpecializedSectionHelper: string;
+  /** Label for the sandbox seed name input. */
+  agentSandboxSeedLabel: string;
+  /** Helper text below the sandbox seed name input. */
+  agentSandboxSeedHelper: string;
+  /** Inline error: regex / format violation. */
+  agentSandboxSeedInvalidError: string;
+  /** Inline error: server returned `seed_dir_not_found`. */
+  agentSandboxSeedNotFoundError: string;
+  /** Label for the fork source conversation id input. */
+  agentForkSourceLabel: string;
+  /** Helper text below the fork source conversation id input. */
+  agentForkSourceHelper: string;
+  /** Inline error: server returned `fork_source_not_found`. */
+  agentForkSourceNotFoundError: string;
+  /** Inline error: server returned `fork_source_agent_mismatch`. */
+  agentForkSourceAgentMismatchError: string;
+  /** Base-conversation mode option — none (brand-new conversation). */
+  agentForkSourceModeNone: string;
+  /** Base-conversation mode option — pick a rotating message. */
+  agentForkSourceModeRotating: string;
+  /** Base-conversation mode option — paste a raw conversation id. */
+  agentForkSourceModeManual: string;
+  /** Placeholder in the rotating-message search box. */
+  agentForkSourceRotatingSearchPlaceholder: string;
+  /** Shown when no rotating messages exist / match the search. */
+  agentForkSourceRotatingEmpty: string;
+  /** Inline error: server returned `rotating_message_not_found`. */
+  agentForkSourceRotatingNotFoundError: string;
+  /** Inline error: server returned `rotating_message_agent_mismatch`. */
+  agentForkSourceRotatingMismatchError: string;
+
+  /* ── Rotating starting messages ([docs/server/rotating-messages.md]) ─ */
+  /** Page heading. */
+  rotatingHeading: string;
+  /** Loading placeholder. */
+  rotatingLoading: string;
+  /** Empty-state copy. */
+  rotatingEmpty: string;
+  /** Generic load error. */
+  rotatingGenericError: string;
+  /** `[+ Create rotating message]` button. */
+  rotatingCreateButton: string;
+  /** Table column — name. */
+  rotatingColumnName: string;
+  /** Table column — Letta agent. */
+  rotatingColumnAgent: string;
+  /** Table column — schedule summary. */
+  rotatingColumnSchedule: string;
+  /** Table column — last rotation status. */
+  rotatingColumnStatus: string;
+  /** Table column — the rmsg- id (copyable). */
+  rotatingColumnId: string;
+  /** Table column — actions. */
+  rotatingColumnActions: string;
+  /** Row action — edit. */
+  rotatingEditButton: string;
+  /** Row action — rotate now. */
+  rotatingRotateNowButton: string;
+  /** Row action — archive. */
+  rotatingArchiveButton: string;
+  /** Row action — unarchive. */
+  rotatingUnarchiveButton: string;
+  /** `{name}` archive confirmation prompt. */
+  rotatingArchiveConfirmPrompt: string;
+  /** Show-archived filter toggle. */
+  rotatingShowArchivedToggle: string;
+  /** Status pill — never rotated yet. */
+  rotatingStatusPending: string;
+  /** Status pill — last rotation succeeded. */
+  rotatingStatusOk: string;
+  /** Status pill — last rotation failed. */
+  rotatingStatusError: string;
+  /** Status pill — archived. */
+  rotatingStatusArchived: string;
+  /** Transient label while a rotate-now request is running. */
+  rotatingRotateNowRunning: string;
+
+  /* ── Rotating message editor modal ─────────────────────────────────── */
+  /** Create-modal title. */
+  createRotatingModalTitle: string;
+  /** Edit-modal title (`{name}` placeholder). */
+  editRotatingModalTitle: string;
+  /** Display-name field label. */
+  rotatingNameLabel: string;
+  /** Display-name field helper. */
+  rotatingNameHelper: string;
+  /** Inline validation: name required. */
+  rotatingNameRequiredError: string;
+  /** Prompt field label. */
+  rotatingPromptLabel: string;
+  /** Prompt field helper. */
+  rotatingPromptHelper: string;
+  /** Inline validation: prompt required. */
+  rotatingPromptRequiredError: string;
+  /** Letta-agent-id field label. */
+  rotatingAgentLabel: string;
+  /** Letta-agent-id field helper. */
+  rotatingAgentHelper: string;
+  /** Inline validation: agent id required. */
+  rotatingAgentRequiredError: string;
+  /** Inline error: server returned `letta_agent_not_found`. */
+  rotatingAgentNotFoundError: string;
+  /** Schedule section label. */
+  rotatingScheduleLabel: string;
+  /** Schedule mode — fixed interval. */
+  rotatingScheduleEveryOption: string;
+  /** Schedule mode — daily at a fixed time. */
+  rotatingScheduleDailyOption: string;
+  /** Schedule mode — advanced cron. */
+  rotatingScheduleCronOption: string;
+  /** Interval value field label (the number). */
+  rotatingIntervalValueLabel: string;
+  /** Interval unit — hours. */
+  rotatingIntervalUnitHours: string;
+  /** Interval unit — days. */
+  rotatingIntervalUnitDays: string;
+  /** Daily-time field label. */
+  rotatingDailyTimeLabel: string;
+  /** Daily-time field helper (notes UTC). */
+  rotatingDailyTimeHelper: string;
+  /** Cron field label. */
+  rotatingCronLabel: string;
+  /** Cron field helper. */
+  rotatingCronHelper: string;
+  /** Inline error: server returned `invalid_schedule`. */
+  rotatingScheduleInvalidError: string;
+  /** Generic banner for other create/edit errors. */
+  rotatingSubmitGenericError: string;
+  /** Cancel button. */
+  rotatingModalCancelButton: string;
+  /** Create button. */
+  rotatingModalCreateButton: string;
+  /** Save button (edit mode). */
+  rotatingModalSaveButton: string;
+  /** In-flight submit button label. */
+  rotatingModalSubmittingButton: string;
+
+  /* ── Step 12 — Sessions overview ([07-admin-sessions-overview.md]) ─ */
+  /** Page heading. */
+  sessionsOverviewHeading: string;
+  /** Search input placeholder. */
+  sessionsOverviewSearchPlaceholder: string;
+  /** Filter label — owner dropdown. */
+  sessionsOverviewOwnerFilterLabel: string;
+  /** Filter dropdown option — all owners. */
+  sessionsOverviewOwnerFilterAll: string;
+  /** Filter label — agent dropdown. */
+  sessionsOverviewAgentFilterLabel: string;
+  /** Filter dropdown option — all agents. */
+  sessionsOverviewAgentFilterAll: string;
+  /** Filter label — status dropdown. */
+  sessionsOverviewStatusFilterLabel: string;
+  /** Filter dropdown option — active. */
+  sessionsOverviewStatusActive: string;
+  /** Filter dropdown option — archived. */
+  sessionsOverviewStatusArchived: string;
+  /** Filter dropdown option — all. */
+  sessionsOverviewStatusAll: string;
+  /** Table column header — title. */
+  sessionsOverviewColumnTitle: string;
+  /** Table column header — owner. */
+  sessionsOverviewColumnOwner: string;
+  /** Table column header — agent. */
+  sessionsOverviewColumnAgent: string;
+  /** Table column header — last message timestamp. */
+  sessionsOverviewColumnLastMessage: string;
+  /** Table column header — actions. */
+  sessionsOverviewColumnActions: string;
+  /** Per-row `[View]` button label. */
+  sessionsOverviewViewButton: string;
+  /** Pagination — Previous page button. */
+  sessionsOverviewPrevPage: string;
+  /** Pagination — Next page button. */
+  sessionsOverviewNextPage: string;
+  /** Pagination — current-page text; `{n}` is interpolated. */
+  sessionsOverviewPageNumber: string;
+  /** Loading placeholder. */
+  sessionsOverviewLoading: string;
+  /** Empty placeholder for the current filter combination. */
+  sessionsOverviewEmpty: string;
+  /** Generic banner shown when `/admin/sessions` fails. */
+  sessionsOverviewGenericError: string;
+  /** Back link on the session detail view. */
+  sessionsOverviewBackLink: string;
+  /** Detail header subtitle template — `{title} — {owner} — {agent}`. */
+  sessionsOverviewDetailHeading: string;
+  /** Loading placeholder on the detail view. */
+  sessionsOverviewDetailLoading: string;
+  /** Empty placeholder when the conversation has no messages yet. */
+  sessionsOverviewDetailEmpty: string;
+  /** Generic banner on detail-view fetch failure. */
+  sessionsOverviewDetailGenericError: string;
+  /** Step-12.5 — label for the sandbox-state line in the detail footer. */
+  sessionsOverviewDetailSandboxLabel: string;
+  /** Step-12.5 — text shown when the session has a sandbox on disk. */
+  sessionsOverviewDetailSandboxPresent: string;
+  /** Step-12.5 — text shown when no sandbox is configured. */
+  sessionsOverviewDetailSandboxAbsent: string;
+  /** Step-12.5 — `[Purge sandbox]` button label. */
+  sessionsOverviewPurgeSandboxButton: string;
+  /** Step-12.5 — `window.confirm` body when the operator clicks purge. */
+  sessionsOverviewPurgeSandboxConfirmPrompt: string;
+  /** Step-12.5 — button label while the purge request is in flight. */
+  sessionsOverviewPurgeSandboxConfirming: string;
+  /** Step-12.5 — flash on successful purge. */
+  sessionsOverviewPurgeSandboxSuccessFlash: string;
+  /** Step-12.5 — inline error: 409 turn_running. */
+  sessionsOverviewPurgeSandboxTurnRunningError: string;
+  /** Step-12.5 — generic error banner. */
+  sessionsOverviewPurgeSandboxGenericError: string;
+
+  /* ── Step 12 — Settings ([08-admin-settings.md]) ─────────────── */
+  /** Page heading. */
+  settingsHeading: string;
+  /** Loading placeholder. */
+  settingsLoading: string;
+  /** Generic banner shown when `/admin/settings` fails. */
+  settingsGenericError: string;
+
+  /* Letta connection section. */
+  settingsLettaSectionHeading: string;
+  settingsLettaBaseUrlLabel: string;
+  settingsLettaAdeUrlLabel: string;
+  settingsLettaAdeUrlHelper: string;
+  settingsLettaApiKeyLabel: string;
+  /** Shown when DB column has a value (super-admin set it via admin panel). */
+  settingsLettaApiKeyDbHelper: string;
+  /** Shown when DB column is empty but `LETTA_API_KEY` env var is set. */
+  settingsLettaApiKeyEnvHelper: string;
+  /** Shown when nothing is configured anywhere (chat will fail). */
+  settingsLettaApiKeyNoneHelper: string;
+  /** @deprecated Use `settingsLettaApiKeyDbHelper` (DB) or `settingsLettaApiKeyEnvHelper` (env). Kept for wrapper backward-compat. */
+  settingsLettaApiKeyMaskedHelper: string;
+  /** @deprecated Use `settingsLettaApiKeyNoneHelper`. Kept for wrapper backward-compat. */
+  settingsLettaApiKeyUnsetHelper: string;
+  settingsLettaApiKeyPlaceholder: string;
+  /** "Clear admin override (use env)" button label — only rendered when source is "db". */
+  settingsLettaApiKeyClearOverrideButton: string;
+  settingsSaveLettaButton: string;
+  settingsSaveSavingButton: string;
+  settingsSaveSuccessFlash: string;
+  settingsSaveGenericError: string;
+
+  /* Theme section. */
+  settingsThemeSectionHeading: string;
+  settingsThemeDefaultLabel: string;
+  settingsThemeDefaultLight: string;
+  settingsThemeDefaultDark: string;
+  settingsThemeSwitcherEnabledLabel: string;
+  settingsThemeSwitcherEnabledHelper: string;
+  settingsSaveThemeButton: string;
+
+  /* Feature toggles section. */
+  settingsTogglesSectionHeading: string;
+  settingsTogglesGroupSessions: string;
+  settingsTogglesGroupInput: string;
+  settingsTogglesGroupAffordances: string;
+  settingsTogglesSaveButton: string;
+
+  /* Signing key section. */
+  settingsSigningKeySectionHeading: string;
+  settingsSigningKeyLastRotated: string;
+  settingsSigningKeyNeverRotated: string;
+  settingsSigningKeyWarning: string;
+  settingsRotateSigningKeyButton: string;
+  settingsRotateSigningKeyModalTitle: string;
+  settingsRotateSigningKeyModalBody: string;
+  settingsRotateConfirmInputLabel: string;
+  settingsRotateConfirmPlaceholder: string;
+  settingsRotateConfirmKeyword: string;
+  settingsRotateConfirmButton: string;
+  settingsRotateConfirmingButton: string;
+  settingsRotateGenericError: string;
+
+  /* Metrics token section. */
+  settingsMetricsSectionHeading: string;
+  settingsMetricsLastRotated: string;
+  settingsMetricsNeverRotated: string;
+  settingsMetricsWarning: string;
+  settingsRotateMetricsButton: string;
+  settingsRotateMetricsModalTitle: string;
+  settingsRotateMetricsModalBody: string;
+  settingsMetricsRevealTitle: string;
+  settingsMetricsRevealTokenLabel: string;
+  settingsMetricsRevealWarning: string;
+}
+
+/**
+ * Aggregate `texts` surface. Wrappers pass a `Partial<AIHubTexts>` and the
+ * components fall back to `defaultAIHubTexts` for any missing key.
+ *
+ * Step 8 defines `login` + `changePassword`; Step 9 appends `chat`. Later
+ * steps will add `admin`, `agents`, etc. (each typed as its own
+ * sub-interface) without touching existing keys — wrappers stay
+ * forward-compatible.
+ */
+export interface AIHubTexts {
+  /** Strings on the login screen. */
+  login: AIHubLoginTexts;
+  /** Strings on the change-password screen (both variants). */
+  changePassword: AIHubChangePasswordTexts;
+  /** Strings on the chat surface (Step 9). */
+  chat: AIHubChatTexts;
+  /** Strings on the admin surface (Step 11+). */
+  admin: AIHubAdminTexts;
+}
+
+/**
+ * English defaults for every key. Frozen so accidental mutation surfaces.
+ */
+export const defaultAIHubTexts: AIHubTexts = Object.freeze({
+  login: Object.freeze({
+    usernameLabel: "Username",
+    passwordLabel: "Password",
+    signInButton: "Sign in",
+    signingInButton: "Signing in…",
+    forgotPasswordNote:
+      "Forgot or lost your password? Contact your administrator.",
+    showPasswordAriaLabel: "Show password",
+    hidePasswordAriaLabel: "Hide password",
+    invalidCredentialsError: "Invalid username or password.",
+    networkError: "Could not reach the server. Try again.",
+  }),
+  changePassword: Object.freeze({
+    title: "Change Password",
+    forcedChangePasswordIntro:
+      "You must change your password before continuing.",
+    currentPasswordLabel: "Current Password",
+    newPasswordLabel: "New Password",
+    confirmPasswordLabel: "Confirm New Password",
+    changePasswordButton: "Change Password",
+    savingButton: "Saving…",
+    cancelButton: "Cancel",
+    passwordsMustMatchError: "Passwords do not match.",
+    passwordTooShortError: "New password must be at least 8 characters.",
+    passwordTooSimpleError:
+      "New password must contain at least two of these three: letters, digits, special characters.",
+    invalidCurrentPasswordError: "Current password is incorrect.",
+    networkError: "Could not reach the server. Try again.",
+    showPasswordAriaLabel: "Show password",
+    hidePasswordAriaLabel: "Hide password",
+  }),
+  chat: Object.freeze({
+    agentsPickerHeading: "Choose an agent",
+    agentCardSessionsSubtitle: "{count} of your sessions",
+    agentCardNoSessionsSubtitle: "No sessions yet",
+    agentsPickerEmptyHeading: "No agents available",
+    agentsPickerEmptyBody:
+      "An administrator hasn't published any agents in this deployment yet.",
+    agentsPickerLoading: "Loading agents…",
+    agentsPickerError: "Could not load agents. Try again.",
+    sessionsLoading: "Loading…",
+    sessionsEmpty: "No chats yet.",
+    newSessionButton: "+ New chat",
+    showArchivedToggle: "Show archived",
+    hideArchivedToggle: "Hide archived",
+    editSessionTitleAriaLabel: "Edit chat title",
+    archiveSessionAriaLabel: "Archive chat",
+    unarchiveSessionAriaLabel: "Unarchive chat",
+    archiveConfirmPrompt:
+      "Archive “{title}”? You can find it later under the Archived filter.",
+    collapseSessionsPanel: "Collapse sessions panel",
+    expandSessionsPanel: "Show sessions panel",
+    backToAgentsLink: "← Agents",
+    untitledSessionFallback: "(untitled)",
+    noActiveSessionHint:
+      "Pick a chat from the left or start a new one to begin.",
+    emptyConversationHint:
+      "Send a message to get started — the assistant's reply will stream here.",
+    inputPlaceholder: "Type a message — Enter to send, Shift+Enter for a newline.",
+    sendButton: "Send",
+    stopButton: "Stop",
+    stoppingButton: "Stopping…",
+    sendButtonAriaLabel: "Send message",
+    stopButtonAriaLabel: "Stop generation",
+    newSessionModalTitle: "New chat",
+    editSessionModalTitle: "Rename chat",
+    sessionTitleLabel: "Chat title",
+    sessionTitlePlaceholder: "What is this chat about?",
+    sessionTitleRequiredError: "A title is required.",
+    sessionTitleTooLongError: "Title must be 80 characters or fewer.",
+    modalCancelButton: "Cancel",
+    modalCreateButton: "Create",
+    modalSaveButton: "Save",
+    genericRequestError: "Something went wrong. Try again.",
+    noAssistantResponseError:
+      "The agent didn't produce a response. Contact your administrator if this persists.",
+    signOutMenuItem: "Sign out",
+    /* Step 10 affordance defaults. */
+    stopGenerationButton: "Stop generation",
+    cancelToolButton: "Cancel tool",
+    systemResumedText: "Resumed.",
+    tpmWaitText: "Provider rate-limited. Resuming in {seconds}s…",
+    tpmExhaustedText:
+      "The model hit its rate limit and could not recover. Try again, or shorten your last message.",
+    tpmRetryButton: "Retry",
+    streamFailedText: "Stream failed.",
+    retryFailedButton: "Retry",
+    cancelledStampText: "Stopped",
+    scrollToPresentButton: "↓ Jump to latest",
+    reasoningCollapsedHeader: "🧠 Reasoning…  ({seconds}s)",
+    reasoningCollapsedHeaderNoDuration: "🧠 Reasoning",
+    reasoningExpandedHeader: "🧠 Reasoning  ({seconds}s)",
+    reasoningExpandedHeaderNoDuration: "🧠 Reasoning",
+    reasoningExpandAriaLabel: "Show reasoning",
+    reasoningCollapseAriaLabel: "Hide reasoning",
+    reasoningThinkingPlaceholder: "Reasoning in progress…",
+    toolCallRunningStatus: "⟳ running…",
+    toolCallDoneStatus: "✓ done",
+    toolCallErrorStatus: "✗ error",
+    toolCallInputLabel: "Input:",
+    toolCallOutputLabel: "Output:",
+    toolCallErrorLabel: "Error:",
+    toolCallExpandAriaLabel: "Show tool call details",
+    toolCallCollapseAriaLabel: "Hide tool call details",
+    effortLabel: "Effort",
+    effortNone: "None",
+    effortMinimal: "Minimal",
+    effortLow: "Low",
+    effortMedium: "Medium",
+    effortHigh: "High",
+    effortExtraHigh: "Extra High",
+    themeDarkLabel: "Dark",
+    themeLightLabel: "Light",
+    themeSwitchToDarkAriaLabel: "Switch to dark theme",
+    themeSwitchToLightAriaLabel: "Switch to light theme",
+    /* Step 11 user-menu defaults. */
+    adminMenuItem: "Admin",
+    openLettaAdeMenuItem: "Open Letta ADE",
+  }),
+  admin: Object.freeze({
+    /* Shell. */
+    navHeading: "Admin",
+    navUsers: "Users",
+    navAgents: "Agents",
+    navSessionsOverview: "Sessions overview",
+    navRotatingMessages: "Rotating messages",
+    navSettings: "Settings",
+    backToChatLink: "Back to chat",
+    comingInStep12Placeholder:
+      "The {page} page is coming in the next implementation step.",
+    /* Users sub-page. */
+    usersHeading: "User Management",
+    createUserButton: "+ Create user",
+    userColumnUsername: "Username",
+    userColumnDisplay: "Display",
+    userColumnRole: "Role",
+    userColumnActions: "Actions",
+    usersLoading: "Loading users…",
+    usersEmpty: "No users in this deployment yet.",
+    usersGenericError: "Could not load users. Try again.",
+    resetPasswordButtonLabel: "Reset password",
+    deleteUserButtonLabel: "Delete user",
+    roleSelectShieldDisabledHint:
+      "Only a super-admin can change another admin's role.",
+    roleSelectMinCountDisabledHint:
+      "The last super-admin cannot be demoted.",
+    roleChangeForbiddenFallback:
+      "You are not allowed to change this user's role.",
+    roleChangeSuccessToast: "Role updated to {role}.",
+    initialPasswordIndicator: "⚠ initial password",
+    roleOptionUser: "user",
+    roleOptionPowerUser: "power_user",
+    roleOptionAdmin: "admin",
+    roleOptionSuperAdmin: "super_admin",
+    /* Create user modal. */
+    createUserModalTitle: "Create New User",
+    createUserUsernameLabel: "Username",
+    createUserDisplayLabel: "Display name (optional)",
+    createUserRoleLabel: "Role",
+    createUserCancelButton: "Cancel",
+    createUserSubmitButton: "Create user",
+    createUserSubmittingButton: "Creating…",
+    createUserUsernameRequiredError: "Username is required.",
+    createUserUsernameTakenError: "That username is already in use.",
+    createUserGenericError: "Could not create the user. Try again.",
+    /* Password reveal modal. */
+    passwordRevealCreateTitle: "User created",
+    passwordRevealResetTitle: "Password reset",
+    passwordRevealWarning:
+      "This password will be shown only once. Send it to the user securely. They will be required to change it on first login.",
+    passwordRevealUsernameLabel: "Username",
+    passwordRevealPasswordLabel: "Generated password",
+    passwordRevealCopyAriaLabel: "Copy password to clipboard",
+    passwordRevealCopiedFlash: "Copied!",
+    passwordRevealDoneButton: "Done",
+    /* Reset confirm modal. */
+    resetPasswordModalTitle: "Reset password for “{username}”?",
+    resetPasswordModalBody:
+      "A new random password will be generated. The current password will be invalidated. The user will be required to change the new password on their next login.",
+    resetPasswordCancelButton: "Cancel",
+    resetPasswordConfirmButton: "Reset password",
+    resetPasswordConfirmingButton: "Resetting…",
+    resetPasswordGenericError:
+      "Could not reset the password. Try again.",
+    /* Delete user. */
+    deleteUserConfirmPrompt:
+      "Delete user “{username}”? This is irreversible and will remove all of their sessions.",
+    deleteUserGenericError:
+      "Could not delete the user. Try again.",
+    /* Step 12 — Agents sub-page. */
+    agentsHeading: "Agents",
+    createAgentButton: "+ Create agent",
+    openLettaAdeButton: "↗ Open Letta ADE",
+    agentColumnName: "Display name",
+    agentColumnLettaId: "Letta agent_id",
+    agentColumnStatus: "Status",
+    agentColumnActions: "Actions",
+    agentsLoading: "Loading agents…",
+    agentsEmpty: "No agents in this deployment yet.",
+    agentsGenericError: "Could not load agents. Try again.",
+    agentStatusActive: "active",
+    agentStatusArchived: "archived",
+    agentEditButton: "Edit",
+    agentArchiveButton: "Archive",
+    agentUnarchiveButton: "Unarchive",
+    agentShowArchivedToggle: "Show archived",
+    agentsAdeFootnote:
+      "To change the model, provider, system prompt, tools, or memory of an agent, edit it in Letta's ADE. Changes take effect for every ai-hub user immediately.",
+    agentArchiveConfirmPrompt:
+      "Archive “{name}”? End-users will no longer be able to start new sessions with this agent. Existing sessions keep working.",
+    createAgentModalTitle: "Create an ai-hub agent",
+    editAgentModalTitle: "Edit “{name}”",
+    agentNameLabel: "Display name",
+    agentNameHelper: "Shown to users in the agents picker.",
+    agentLettaIdLabel: "Letta agent_id",
+    agentLettaIdHelper:
+      "Find this in Letta's ADE — the Letta agent must already exist; ai-hub does not create Letta agents.",
+    agentLettaIdReassignHelper:
+      "Re-pointing this changes which Letta agent NEW sessions use; existing sessions keep their original conversation and continue against the original Letta agent.",
+    agentModalCancelButton: "Cancel",
+    agentModalCreateButton: "Create",
+    agentModalSaveButton: "Save",
+    agentModalSubmittingButton: "Saving…",
+    agentNameRequiredError: "Display name is required.",
+    agentLettaIdRequiredError: "Letta agent_id is required.",
+    agentLettaIdNotFoundError:
+      "No Letta agent with that id was found. Check the value in Letta's ADE.",
+    agentSubmitGenericError: "Could not save the agent. Try again.",
+    /* Step 12.5 — specialized agents. */
+    agentSpecializedSectionHeading: "Specialized agent (optional)",
+    agentSpecializedSectionHelper:
+      "Pre-load each session with files and/or an admin-curated conversation. Leave both blank for a stateless agent.",
+    agentSandboxSeedLabel: "Sandbox seed folder",
+    agentSandboxSeedHelper:
+      "Name of a folder under AI_HUB_FILES_DIR/seeds/ that gets copied into each session's working directory. The agent gains read/write access inside that copy.",
+    agentSandboxSeedInvalidError:
+      "Must match ^[a-zA-Z0-9_-]+$ — letters, digits, dashes, and underscores only.",
+    agentSandboxSeedNotFoundError:
+      "No folder with that name exists under AI_HUB_FILES_DIR/seeds/. Create it on the server first.",
+    agentForkSourceLabel: "Base conversation",
+    agentForkSourceHelper:
+      "Each new session forks from this base. Pick a rotating message (auto-refreshing) or paste a Letta conversation id (conv-…). Either way it must belong to the same Letta agent.",
+    agentForkSourceNotFoundError:
+      "No Letta conversation with that id was found.",
+    agentForkSourceAgentMismatchError:
+      "That conversation belongs to a different Letta agent. The base conversation must be on the same agent as letta_agent_id above.",
+    agentForkSourceModeNone: "None — start every session fresh",
+    agentForkSourceModeRotating: "Rotating message",
+    agentForkSourceModeManual: "Conversation id",
+    agentForkSourceRotatingSearchPlaceholder: "Search rotating messages…",
+    agentForkSourceRotatingEmpty: "No rotating messages yet. Create one on the Rotating messages page.",
+    agentForkSourceRotatingNotFoundError:
+      "That rotating message no longer exists or is archived.",
+    agentForkSourceRotatingMismatchError:
+      "That rotating message runs against a different Letta agent. It must share the same agent as letta_agent_id above.",
+    /* Rotating starting messages. */
+    rotatingHeading: "Rotating messages",
+    rotatingLoading: "Loading rotating messages…",
+    rotatingEmpty: "No rotating messages yet.",
+    rotatingGenericError: "Could not load rotating messages.",
+    rotatingCreateButton: "+ Create rotating message",
+    rotatingColumnName: "Name",
+    rotatingColumnAgent: "Letta agent",
+    rotatingColumnSchedule: "Schedule",
+    rotatingColumnStatus: "Last run",
+    rotatingColumnId: "Reference id",
+    rotatingColumnActions: "Actions",
+    rotatingEditButton: "Edit",
+    rotatingRotateNowButton: "Rotate now",
+    rotatingArchiveButton: "Archive",
+    rotatingUnarchiveButton: "Unarchive",
+    rotatingArchiveConfirmPrompt: "Archive rotating message “{name}”? Agents using it will fail to start new sessions until repointed.",
+    rotatingShowArchivedToggle: "Show archived",
+    rotatingStatusPending: "Not run yet",
+    rotatingStatusOk: "OK",
+    rotatingStatusError: "Failed",
+    rotatingStatusArchived: "Archived",
+    rotatingRotateNowRunning: "Rotating…",
+    createRotatingModalTitle: "Create rotating message",
+    editRotatingModalTitle: "Edit “{name}”",
+    rotatingNameLabel: "Display name",
+    rotatingNameHelper: "Operator-facing label. Not shown to end users.",
+    rotatingNameRequiredError: "A display name is required.",
+    rotatingPromptLabel: "Prompt",
+    rotatingPromptHelper:
+      "Sent to the agent each rotation. The agent's reply becomes the prepared opening message (e.g. “Summarize today's weather for Prague.”).",
+    rotatingPromptRequiredError: "A prompt is required.",
+    rotatingAgentLabel: "Letta agent id",
+    rotatingAgentHelper:
+      "The Letta agent the prompt runs against. Agents that reference this rotating message must share this Letta agent id.",
+    rotatingAgentRequiredError: "A Letta agent id is required.",
+    rotatingAgentNotFoundError: "No Letta agent with that id was found.",
+    rotatingScheduleLabel: "Rotation schedule",
+    rotatingScheduleEveryOption: "Every…",
+    rotatingScheduleDailyOption: "Daily at…",
+    rotatingScheduleCronOption: "Advanced (cron)",
+    rotatingIntervalValueLabel: "Every",
+    rotatingIntervalUnitHours: "hours",
+    rotatingIntervalUnitDays: "days",
+    rotatingDailyTimeLabel: "Time (UTC)",
+    rotatingDailyTimeHelper: "24-hour HH:MM, in UTC.",
+    rotatingCronLabel: "Cron expression",
+    rotatingCronHelper: "5-field cron (minute hour day-of-month month day-of-week), evaluated in UTC. E.g. “0 6 * * *” = 06:00 UTC daily.",
+    rotatingScheduleInvalidError: "That schedule isn't valid. Check the interval / time / cron expression.",
+    rotatingSubmitGenericError: "Could not save the rotating message. Try again.",
+    rotatingModalCancelButton: "Cancel",
+    rotatingModalCreateButton: "Create",
+    rotatingModalSaveButton: "Save",
+    rotatingModalSubmittingButton: "Saving…",
+    /* Step 12 — Sessions overview. */
+    sessionsOverviewHeading: "Sessions",
+    sessionsOverviewSearchPlaceholder: "Search titles…",
+    sessionsOverviewOwnerFilterLabel: "Owner",
+    sessionsOverviewOwnerFilterAll: "all users",
+    sessionsOverviewAgentFilterLabel: "Agent",
+    sessionsOverviewAgentFilterAll: "all agents",
+    sessionsOverviewStatusFilterLabel: "Status",
+    sessionsOverviewStatusActive: "active",
+    sessionsOverviewStatusArchived: "archived",
+    sessionsOverviewStatusAll: "all",
+    sessionsOverviewColumnTitle: "Title",
+    sessionsOverviewColumnOwner: "Owner",
+    sessionsOverviewColumnAgent: "Agent",
+    sessionsOverviewColumnLastMessage: "Last msg",
+    sessionsOverviewColumnActions: "Actions",
+    sessionsOverviewViewButton: "View",
+    sessionsOverviewPrevPage: "← Prev",
+    sessionsOverviewNextPage: "Next →",
+    sessionsOverviewPageNumber: "Page {n}",
+    sessionsOverviewLoading: "Loading sessions…",
+    sessionsOverviewEmpty: "No sessions match the current filters.",
+    sessionsOverviewGenericError: "Could not load sessions. Try again.",
+    sessionsOverviewBackLink: "← Back to sessions",
+    sessionsOverviewDetailHeading: "{title} — {owner} — {agent}",
+    sessionsOverviewDetailLoading: "Loading messages…",
+    sessionsOverviewDetailEmpty: "This session has no messages yet.",
+    sessionsOverviewDetailGenericError:
+      "Could not load messages. Try again.",
+    sessionsOverviewDetailSandboxLabel: "Sandbox:",
+    sessionsOverviewDetailSandboxPresent:
+      "on disk under AI_HUB_FILES_DIR/sandboxes/<session-id>/",
+    sessionsOverviewDetailSandboxAbsent: "— (no sandbox)",
+    sessionsOverviewPurgeSandboxButton: "Purge sandbox",
+    sessionsOverviewPurgeSandboxConfirmPrompt:
+      "Delete the session's sandbox folder and all its contents? This cannot be undone.",
+    sessionsOverviewPurgeSandboxConfirming: "Purging…",
+    sessionsOverviewPurgeSandboxSuccessFlash: "Sandbox purged.",
+    sessionsOverviewPurgeSandboxTurnRunningError:
+      "Cannot purge sandbox while a turn is running. Wait for the turn to complete and try again.",
+    sessionsOverviewPurgeSandboxGenericError:
+      "Could not purge the sandbox. Try again.",
+    /* Step 12 — Settings. */
+    settingsHeading: "Settings",
+    settingsLoading: "Loading settings…",
+    settingsGenericError: "Could not load settings. Try again.",
+    settingsLettaSectionHeading: "Letta connection",
+    settingsLettaBaseUrlLabel: "Letta base URL",
+    settingsLettaAdeUrlLabel:
+      "Letta ADE URL (browser-facing — used for “Open Letta ADE” link)",
+    settingsLettaAdeUrlHelper:
+      "Optional; if blank, derived from the base URL with /v1 stripped.",
+    settingsLettaApiKeyLabel: "Letta API key",
+    settingsLettaApiKeyDbHelper:
+      "Currently configured via the admin panel (overrides LETTA_API_KEY env). Type a new value to replace it, or clear the override to fall back to env.",
+    settingsLettaApiKeyEnvHelper:
+      "Currently using LETTA_API_KEY from the server's env. Type a value here to override env with an admin-panel value.",
+    settingsLettaApiKeyNoneHelper:
+      "No key configured (neither admin panel nor LETTA_API_KEY env). Paste the Letta server's password here, or set LETTA_API_KEY in .env.",
+    settingsLettaApiKeyMaskedHelper:
+      "Currently configured. Type a new value to replace it.",
+    settingsLettaApiKeyUnsetHelper:
+      "No key configured. Paste the Letta server's API key here.",
+    settingsLettaApiKeyPlaceholder: "••••••••••••••••",
+    settingsLettaApiKeyClearOverrideButton: "Clear admin override (use env value)",
+    settingsSaveLettaButton: "Save connection",
+    settingsSaveSavingButton: "Saving…",
+    settingsSaveSuccessFlash: "Saved.",
+    settingsSaveGenericError: "Could not save. Try again.",
+    settingsThemeSectionHeading: "Theme",
+    settingsThemeDefaultLabel: "Default theme",
+    settingsThemeDefaultLight: "Light",
+    settingsThemeDefaultDark: "Dark",
+    settingsThemeSwitcherEnabledLabel: "Allow users to switch themes",
+    settingsThemeSwitcherEnabledHelper:
+      "When off, the deployment is single-theme: the theme switcher is hidden and every user sees the default theme.",
+    settingsSaveThemeButton: "Save theme",
+    settingsTogglesSectionHeading: "UI feature toggles",
+    settingsTogglesGroupSessions: "Sessions panel",
+    settingsTogglesGroupInput: "Input",
+    settingsTogglesGroupAffordances: "Chat affordances",
+    settingsTogglesSaveButton: "Save toggles",
+    settingsSigningKeySectionHeading: "Signing key",
+    settingsSigningKeyLastRotated: "Last rotated: {date}",
+    settingsSigningKeyNeverRotated: "Never rotated since deploy.",
+    settingsSigningKeyWarning:
+      "Rotating the signing key invalidates every outstanding session. Every signed-in user (including you) will be logged out and need to log in again. There is no undo.",
+    settingsRotateSigningKeyButton: "Rotate signing key",
+    settingsRotateSigningKeyModalTitle: "Rotate signing key?",
+    settingsRotateSigningKeyModalBody:
+      "This will log out every signed-in user immediately, including you. They (and you) will need to log back in.",
+    settingsRotateConfirmInputLabel: "Type ROTATE to confirm:",
+    settingsRotateConfirmPlaceholder: "ROTATE",
+    settingsRotateConfirmKeyword: "ROTATE",
+    settingsRotateConfirmButton: "Rotate",
+    settingsRotateConfirmingButton: "Rotating…",
+    settingsRotateGenericError: "Could not rotate. Try again.",
+    settingsMetricsSectionHeading: "Metrics scrape token",
+    settingsMetricsLastRotated: "Last rotated: {date}",
+    settingsMetricsNeverRotated: "Never rotated since deploy.",
+    settingsMetricsWarning:
+      "Rotating invalidates the current token immediately. Every scraper using the old value will start failing until you paste the new token into its config. The new token is shown ONCE on rotation — copy it before closing the dialog.",
+    settingsRotateMetricsButton: "Rotate metrics token",
+    settingsRotateMetricsModalTitle: "Rotate metrics scrape token?",
+    settingsRotateMetricsModalBody:
+      "Old scrapers will start failing until you paste the new value into their config. Your own session is NOT affected.",
+    settingsMetricsRevealTitle: "Metrics token rotated",
+    settingsMetricsRevealTokenLabel: "New bearer token",
+    settingsMetricsRevealWarning:
+      "This token will be shown only once. Copy it into your Prometheus / Alloy / scraper config before dismissing this dialog.",
+  }),
+}) as AIHubTexts;
+
+/**
+ * Resolves the final `AIHubTexts` map by merging a wrapper-supplied partial
+ * over the English defaults. Resolution is **shallow per namespace, deep per
+ * key** — wrappers can override individual keys without re-declaring the
+ * whole namespace.
+ *
+ * Example:
+ *
+ * ```ts
+ * resolveAIHubTexts({ login: { signInButton: "Přihlásit" } })
+ *   .login.signInButton            // "Přihlásit"
+ *   .login.signingInButton         // "Signing in…" (default)
+ *   .changePassword.title          // "Change Password" (default)
+ * ```
+ *
+ * @param overrides - the wrapper-supplied partial. `undefined` is fine and
+ *   returns the defaults unchanged.
+ * @returns the fully resolved `AIHubTexts`.
+ */
+export function resolveAIHubTexts(
+  overrides: DeepPartial<AIHubTexts> | undefined,
+): AIHubTexts {
+  if (!overrides) return defaultAIHubTexts;
+  return {
+    login: { ...defaultAIHubTexts.login, ...(overrides.login ?? {}) },
+    changePassword: {
+      ...defaultAIHubTexts.changePassword,
+      ...(overrides.changePassword ?? {}),
+    },
+    chat: { ...defaultAIHubTexts.chat, ...(overrides.chat ?? {}) },
+    admin: { ...defaultAIHubTexts.admin, ...(overrides.admin ?? {}) },
+  };
+}
+
+/**
+ * Recursive `Partial` — wrappers only need to set the keys they want to
+ * override; everything else falls back to the English default.
+ */
+export type DeepPartial<T> = {
+  [P in keyof T]?: T[P] extends object ? DeepPartial<T[P]> : T[P];
+};