@hed-hog/core 0.0.387 → 0.0.393

package/hedhog/frontend/messages/en.json

@@ -75,6 +75,7 @@
     "tab2fa": "2FA",
     "tabAccounts": "Accounts",
     "tabSessions": "Sessions",
+    "tabDevices": "Devices",
     "tabMcpTokens": "MCP Tokens",
     "tabTokens": "Tokens",
     "breadcrumbLabel": "Account",
@@ -255,6 +256,8 @@
     "tabIdentifiers": "Identifiers",
     "tabMfa": "MFA",
     "tabSessions": "Sessions",
+    "tabDevices": "Devices",
+    "tabEmails": "Emails",
     "tabLogs": "Logs",
     "cardLastLoginDescription": "Last Login",
     "cardLastLoginTitle": "Never",
@@ -265,6 +268,9 @@
     "cardMfaMethods": "MFA Methods",
     "cardUserId": "User ID",
     "recentActivityTitle": "Recent Activities",
+    "activityToday": "Today",
+    "activityYesterday": "Yesterday",
+    "activityEventsCount": "{count, plural, one {# event} other {# events}}",
     "buttonDeleteUser": "Delete User",
     "dialogDeleteUserTitle": "Delete User Confirmation",
     "dialogDeleteUserDescription": "Are you sure to delete this user? This can not be undone.",
@@ -354,6 +360,7 @@
     "passwordLastChangedAbsolute": "Last recorded update: {absoluteLabel}",
     "passwordLastChangedUnavailable": "The system could not determine when this password was last updated.",
     "passwordResetNotice": "After this reset, the user must change the password on the next login.",
+    "passwordResetSelfNotice": "You can't reset your own password from here — this would immediately require you to change it, and you wouldn't have the generated password to do so. Use your account settings (My Account > Password) instead.",
     "buttonResetPassword": "Reset Password",
     "passwordResetDialogTitle": "Reset User Password",
     "passwordResetDialogDescription": "A strong password is generated by default. You can edit it before confirming.",
@@ -373,7 +380,14 @@
     "viewModeCards": "Cards",
     "columnName": "Name",
     "columnEmail": "Email",
-    "columnStatus": "Status"
+    "columnStatus": "Status",
+    "columnPasswordReset": "Password",
+    "columnLastLogin": "Last login",
+    "passwordResetPending": "Reset pending",
+    "passwordResetNone": "Up to date",
+    "neverLoggedIn": "Never signed in",
+    "filterOptionPasswordReset": "Password reset pending",
+    "activityByActor": "by {name}"
   },
   "RolePage": {
     "title": "Roles Management",
@@ -573,12 +587,14 @@
     "variablesHelp": "Use '{{variable}}' in the email body",
     "bodyLabel": "HTML Body",
     "localeLabel": "Language",
+    "sectionIdentification": "Identification",
     "preview": "Preview",
     "availableVariables": "Available variables:",
     "testValuePlaceholder": "Test value",
     "downloadYAML": "Download YAML",
     "generateMigration": "Generate Migration",
     "sendTestEmail": "Send test email",
+    "moreActions": "More actions",
     "cancel": "Cancel",
     "saveChanges": "Save Changes",
     "createTemplate": "Create Template",
@@ -617,7 +633,9 @@
     "importConflictTitle": "Templates already exist",
     "importConflictDescription": "The following templates already exist in the database. Do you want to overwrite them?",
     "conflictingSlugs": "Conflicting slugs",
-    "overwrite": "Overwrite"
+    "overwrite": "Overwrite",
+    "fullDocumentWarningTitle": "Full HTML document",
+    "fullDocumentWarningDesc": "This body is a complete HTML document, so the base layout will not be applied to it."
   },
   "MailProfilePage": {
     "breadcrumbHome": "Home",
@@ -706,7 +724,11 @@
     "logout": "Logged out",
     "resetPassword": "Reset the password",
     "revokeAllSessions": "Revoked all sessions",
-    "revokeSession": "Revoked a session"
+    "revokeSession": "Revoked a session",
+    "impersonationStarted": "Access simulated by an operator",
+    "impersonationEnded": "Access simulation ended",
+    "impersonationPerformed": "Simulated another user’s access",
+    "impersonationPerformedEnded": "Ended the access simulation"
   },
   "LoginPage": {
     "title": "Authentication",
@@ -748,6 +770,36 @@
     "emailRequired": "Email is required",
     "emailInvalid": "Email is invalid"
   },
+  "ResetPasswordPage": {
+    "title": "Reset Password",
+    "newPasswordLabel": "New Password",
+    "newPasswordPlaceholder": "Enter your new password",
+    "confirmPasswordLabel": "Confirm New Password",
+    "confirmPasswordPlaceholder": "Confirm your new password",
+    "newPasswordMinLength": "Password must be at least {minLength} characters",
+    "newPasswordMinSymbols": "Password must contain at least {minSymbols} special symbols",
+    "newPasswordMinUppercase": "Password must contain at least {minUppercase} uppercase letters",
+    "newPasswordMinNumbers": "Password must contain at least {minNumbers} numbers",
+    "confirmPasswordRequired": "Please confirm your new password",
+    "passwordsDontMatch": "Passwords don't match",
+    "missingTokenTitle": "Invalid link",
+    "missingToken": "This password reset link is invalid or missing. Please request a new one.",
+    "errorTitle": "Reset Failed",
+    "successTitle": "Password updated",
+    "successDescription": "Your password has been reset successfully. Redirecting you now...",
+    "submitButton": "Reset Password",
+    "submitButtonLoading": "Resetting..."
+  },
+  "ConfirmEmailPage": {
+    "title": "Email confirmation",
+    "checking": "One moment while we validate the link...",
+    "invalidTitle": "Invalid link",
+    "invalidDescription": "This confirmation link is invalid or has expired. Your account is still active — just sign in normally.",
+    "successTitle": "Email confirmed",
+    "successDescription": "All set! Your email address has been confirmed.",
+    "alreadyConfirmedDescription": "Your email was already confirmed. There is nothing else to do.",
+    "goToLogin": "Go to sign in"
+  },
   "NavUser": {
     "account": "Account",
     "notifications": "Notifications",
@@ -994,7 +1046,38 @@
     "revokeSuccess": "Session revoked successfully!",
     "revokeFailure": "Failed to revoke session",
     "revokeAllSuccess": "Sessions revoked successfully!",
-    "revokeAllFailure": "Failed to revoke sessions"
+    "revokeAllFailure": "Failed to revoke sessions",
+    "simulatedBy": "Simulated by {name}"
+  },
+  "UserMails": {
+    "title": "Sent emails",
+    "searchPlaceholder": "Search by subject...",
+    "filterByStatus": "Status",
+    "statusAll": "All statuses",
+    "statusReceived": "Received",
+    "statusRead": "Read",
+    "statusError": "Error",
+    "statusUntracked": "Not tracked",
+    "status_received": "Received",
+    "status_read": "Read",
+    "status_error": "Error",
+    "kpiTotal": "Total sent",
+    "kpiRead": "Read",
+    "kpiError": "With error",
+    "emptyTitle": "No emails sent",
+    "emptyDescription": "The system has not sent any email to this user yet.",
+    "detailsTitle": "Email details",
+    "detailsDescription": "Content and delivery status of the sent email.",
+    "subject": "Subject",
+    "from": "From",
+    "to": "To",
+    "cc": "Cc",
+    "bcc": "Bcc",
+    "body": "Body",
+    "delivery": "Delivery",
+    "createdAt": "Sent at",
+    "readAt": "Read at",
+    "errorMessage": "Error"
   },
   "UserChangeLog": {
     "title": "Change History",
@@ -1006,7 +1089,10 @@
     "role_removed": "Role removed",
     "avatar_changed": "Avatar changed",
     "emptyTitle": "No changes recorded",
-    "emptyDescription": "Administrative changes made to this user will appear here."
+    "emptyDescription": "Administrative changes made to this user will appear here.",
+    "impersonation_requested": "Access simulation requested",
+    "impersonation_started": "Access simulation started",
+    "impersonation_ended": "Access simulation ended"
   },
   "UserActiveSessions": {
     "title": "Active Sessions",
@@ -1023,7 +1109,9 @@
     "revokeSuccess": "Session successfully revoked!",
     "revokeFailure": "Failed to revoke session",
     "revokeAllSuccess": "Sessions successfully revoked!",
-    "revokeAllFailure": "Failed to revoke sessions"
+    "revokeAllFailure": "Failed to revoke sessions",
+    "simulatedSession": "Simulated access",
+    "simulatedBy": "Simulated by {name}"
   },
   "UserIdentifiers": {
     "title": "User Identifiers",
@@ -1106,6 +1194,8 @@
     "descriptionRemove": "Enter your verification code to confirm removal",
     "descriptionSetup": "Follow the instructions to setup two-factor authentication",
     "scanQrCode": "Scan this QR code with your authenticator app",
+    "manualCodeHint": "Can't scan it? Type this code into the authenticator app:",
+    "manualCodeCopy": "Copy code",
     "methodNameLabel": "Method Name",
     "methodNamePlaceholder": "e.g., {methodLabel} {example}",
     "securityKeyNameLabel": "Security Key Name",
@@ -1222,6 +1312,7 @@
     "to": "To",
     "cc": "CC",
     "bcc": "BCC",
+    "providerMessageId": "Provider message ID",
     "body": "Body",
     "createdAt": "Created At",
     "updatedAt": "Updated At",
@@ -1241,6 +1332,20 @@
     "statusRead": "Read",
     "statusError": "Error",
     "statusUnavailable": "No status",
+    "filterByDelivery": "Delivery",
+    "deliveryAll": "Any delivery outcome",
+    "deliveryPending": "No answer yet",
+    "deliveryPendingHint": "The provider accepted the message and has not reported the outcome yet.",
+    "deliveryDelivered": "Delivered",
+    "deliveryBounced": "Bounced",
+    "deliveryComplained": "Marked as spam",
+    "deliveryRejected": "Rejected",
+    "undeliveredCurrentPage": "Not delivered (page)",
+    "undeliveredHint": "Accepted by the provider and returned afterwards",
+    "providerEvents": "Provider delivery events",
+    "noProviderEvents": "The provider has not reported anything about this message yet.",
+    "allRecipients": "All recipients",
+    "reportingMta": "Reported by",
     "statusReceivedShort": "Received: {count}",
     "statusReadShort": "Read: {count}",
     "statusErrorShort": "Errors: {count}",
@@ -1292,7 +1397,7 @@
     "fileUploaded": "File uploaded successfully.",
     "fileUploadFailed": "Failed to upload file.",
     "fileIdNotReturned": "File ID not returned.",
-    "temporaryOpenUrlNotReturned": "Temporary open URL not returned.",
+    "apiBaseUrlNotConfigured": "API base URL is not configured.",
     "uploadedFileAlt": "Uploaded file",
     "fileUrlPlaceholder": "File URL",
     "durationUnitSeconds": "Seconds",
@@ -1316,49 +1421,33 @@
     "oauthProfileEmptyState": "No OAuth profiles found.",
     "selectPaymentProfile": "Select a payment profile",
     "paymentProfileEmptyState": "No payment profiles found.",
-    "mailProfile": {
-      "nameLabel": "Name *",
-      "namePlaceholder": "My Mail Profile",
-      "fromEmailLabel": "From Email *",
-      "fromEmailPlaceholder": "no-reply@example.com",
-      "fromNameLabel": "Sender name",
-      "fromNamePlaceholder": "Sales Team",
-      "providerLabel": "Provider *",
-      "providers": {
-        "ses": "Amazon SES"
-      },
-      "smtpHostLabel": "SMTP Host *",
-      "smtpHostPlaceholder": "smtp.example.com",
-      "smtpPortLabel": "SMTP Port *",
-      "smtpPortPlaceholder": "587",
-      "smtpUsernameLabel": "SMTP Username *",
-      "smtpUsernamePlaceholder": "user@example.com",
-      "smtpPasswordLabel": "SMTP Password *",
-      "replyToEmailLabel": "Reply-to email",
-      "replyToEmailPlaceholder": "support@company.com",
-      "clientIdLabel": "Client ID *",
-      "clientSecretLabel": "Client Secret *",
-      "refreshTokenLabel": "Refresh Token *",
-      "accessKeyIdLabel": "Access Key ID *",
-      "secretAccessKeyLabel": "Secret Access Key *",
-      "regionLabel": "Region *",
-      "regionPlaceholder": "us-east-1"
-    },
-    "whatsappProfile": {
-      "nameLabel": "Name *",
-      "namePlaceholder": "My WhatsApp Profile",
-      "providerLabel": "Provider *",
-      "hostLabel": "API Host *",
-      "hostPlaceholder": "https://api.example.com",
-      "instanceNameLabel": "Instance Name *",
-      "instanceNamePlaceholder": "MyInstance",
-      "tokenLabel": "Token *",
-      "tokenPlaceholder": "Authentication token"
+    "whatsappProfileEmptyState": "No WhatsApp profiles found.",
+    "selectIntegrationProfile": "Select an integration profile",
+    "integrationProfileEmptyState": "No integration profiles found.",
+    "editProfileAria": "Edit {profile}",
+    "createProfileAria": "Create {profile}",
+    "profileTypeNames": {
+      "ai": "AI profile",
+      "email": "email profile",
+      "whatsapp": "WhatsApp profile",
+      "storage": "storage profile",
+      "oauth": "OAuth profile",
+      "payment": "payment profile",
+      "infrastructure": "infrastructure profile",
+      "kubernetes": "Kubernetes profile",
+      "generic": "integration profile"
     },
     "selectInfraProfile": "Select infrastructure profile",
     "infraProfileEmptyState": "No infrastructure profiles found. Create a DigitalOcean or Kubernetes profile first.",
     "selectK8sInfraProfile": "Select Kubernetes profile",
-    "k8sInfraProfileEmptyState": "No Kubernetes infrastructure profiles found. Create one first."
+    "k8sInfraProfileEmptyState": "No Kubernetes infrastructure profiles found. Create one first.",
+    "openLink": "Open",
+    "settingOptions": {
+      "commerce-android-checkout-mode": {
+        "web": "Website checkout",
+        "play_billing": "Google Play Billing (in-app purchase)"
+      }
+    }
   },
   "AddWidgetDialog": {
     "title": "Select Dashboard Components",
@@ -1739,7 +1828,13 @@
     "decreaseZoom": "Decrease zoom",
     "resetZoom": "Reset zoom",
     "increaseZoom": "Increase zoom",
-    "saveAndClose": "Save and Close"
+    "saveAndClose": "Save and Close",
+    "aiEdit": "Edit with AI",
+    "aiEditPromptLabel": "What do you want to change?",
+    "aiEditPromptPlaceholder": "e.g., make the tone more formal and add a bullet list of next steps",
+    "aiEditSubmit": "Generate",
+    "aiEditSuccess": "Content updated by AI",
+    "aiEditError": "Could not update the content with AI"
   },
   "DashboardManagement": {
     "title": "Dashboard Management",
@@ -2331,7 +2426,14 @@
     "detailsDescription": "Full details of this access log entry",
     "os": "Operating System",
     "location": "Location",
-    "rawUserAgent": "User Agent"
+    "rawUserAgent": "User Agent",
+    "simulated": "Simulated",
+    "simulatedBy": "Simulated by {name}",
+    "simulatedAccess": "Simulated access",
+    "filterBySimulated": "Simulation",
+    "simulatedAll": "All accesses",
+    "simulatedOnly": "Simulated only",
+    "simulatedExclude": "Exclude simulated"
   },
   "IntegrationProfilePage": {
     "breadcrumbHome": "Home",
@@ -2393,15 +2495,30 @@
     "tableSlug": "Slug",
     "tableProvider": "Provider",
     "tableStatus": "Status",
+    "tableValidation": "Validation",
     "tableUses": "Uses",
     "tableUpdated": "Updated",
     "tableActions": "Actions",
     "statusActive": "Active",
     "statusInactive": "Inactive",
+    "validationOk": "Validated",
+    "validationError": "Failed",
+    "validationNever": "Never tested",
+    "validationTooltipAt": "Last tested on {date}",
     "noProfilesFound": "No profiles found",
     "noProfilesHint": "Create a new profile to store connection credentials.",
     "createProfile": "Create Profile",
     "saveChanges": "Save Changes",
+    "testConnection": "Test connection",
+    "testing": "Testing...",
+    "testConnectionRunning": "Testing connection...",
+    "testConnectionSuccess": "Connection validated successfully.",
+    "testConnectionOkWithInfo": "Connection validated: {info}",
+    "testConnectionWarning": "Credentials are valid, but: {warning}",
+    "testConnectionError": "Connection test failed.",
+    "testConnectionErrorFallback": "Could not validate the credentials.",
+    "testConnectionNotPersisted": "Save the profile to record the result.",
+    "loadingProfile": "Loading profile...",
     "cancel": "Cancel",
     "delete": "Delete",
     "deleteConfirmTitle": "Confirm Deletion",
@@ -2421,6 +2538,8 @@
     "fieldFromEmail": "From Email",
     "fieldFromName": "From Name",
     "fieldReplyTo": "Reply-To Email",
+    "fieldReplyToName": "Reply-To Name",
+    "fieldSnsTopicArn": "SNS Topic ARN (delivery tracking)",
     "fieldClientId": "Client ID",
     "fieldClientSecret": "Client Secret",
     "fieldRefreshToken": "Refresh Token",
@@ -2428,6 +2547,7 @@
     "fieldSecretAccessKey": "Secret Access Key",
     "fieldRegion": "Region",
     "fieldDomain": "Domain",
+    "fieldImapSecure": "Direct TLS (port 993)",
     "fieldToken": "Token",
     "fieldInstanceName": "Instance Name",
     "fieldPhoneNumberId": "Phone Number ID",
@@ -2441,6 +2561,13 @@
     "fieldEnvironmentTest": "Test",
     "fieldEnvironmentProduction": "Production",
     "copiedToClipboard": "Copied to clipboard",
+    "sesWebhookSectionTitle": "Delivery tracking (SNS)",
+    "sesWebhookDescription": "Without this subscription the Hub only knows the provider accepted the message, not whether it was delivered.",
+    "sesWebhookEndpointLabel": "Endpoint URL",
+    "sesWebhookStep1": "Create an SNS topic in the same region as this SES profile.",
+    "sesWebhookStep2": "Add an HTTPS subscription to the topic using the URL above. It is confirmed automatically.",
+    "sesWebhookStep3": "In SES, open the sending identity and point Bounce, Complaint and Delivery notifications to that topic.",
+    "sesWebhookStep4": "Paste the topic ARN in the field above so events from other topics are rejected.",
     "whatsappWebhookSectionTitle": "Meta Webhook",
     "whatsappWebhookDescription": "Register this webhook in your Meta app to receive WhatsApp messages.",
     "whatsappWebhookCallbackUrlLabel": "Callback URL",
@@ -2454,6 +2581,49 @@
     "whatsappWebhookStep2": "Click \"Verify and save\".",
     "whatsappWebhookStep3": "Subscribe to the \"messages\" field.",
     "whatsappWebhookStep4": "Send a test message and confirm it arrives.",
+    "microsoftWebhookSectionTitle": "Microsoft Graph webhook",
+    "microsoftWebhookDescription": "A single URL that receives all Microsoft Graph events (ended meetings/calls, recordings, transcripts, presence, messages and Entra users). Registered automatically in the webhooks list.",
+    "microsoftWebhookUrlLabel": "Webhook URL (notificationUrl)",
+    "microsoftWebhookLoading": "Generating URL…",
+    "microsoftWebhookUnavailable": "URL unavailable — check the API base URL setting (api-url must be a public HTTPS URL).",
+    "microsoftWebhookSaveFirst": "Save the profile to generate the webhook URL.",
+    "microsoftSyncButton": "Sync subscriptions",
+    "microsoftSyncing": "Syncing…",
+    "microsoftSyncResult": "Subscriptions synced: {created} created, {reused} kept, {failed} failed.",
+    "microsoftSyncError": "Failed to sync subscriptions.",
+    "microsoftStepsTitle": "In the Azure portal (Microsoft Entra ID → App registrations):",
+    "microsoftStep1": "Register an app (or use the existing one) and copy the application (client) id and directory (tenant) id into the fields above.",
+    "microsoftStep2": "Under \"Certificates & secrets\", create a client secret and paste it above.",
+    "microsoftStep3": "Under \"Authentication\", add the OAuth redirect URI (callbacks tab) so sign-in works.",
+    "microsoftStep4": "Under \"API permissions\", grant the permissions below and click \"Grant admin consent\".",
+    "microsoftStep5": "Save the profile, copy the webhook URL above and click \"Sync subscriptions\".",
+    "microsoftPermissionsTitle": "Microsoft Graph permissions",
+    "microsoftPermissionsApplication": "Application (admin consent)",
+    "microsoftPermissionsDelegated": "Delegated (per user)",
+    "microsoftProtectedSuffix": "(protected API — requires an approved request to Microsoft)",
+    "microsoftNotes": "App-only meetings/transcripts require an Application Access Policy created via PowerShell (New-CsApplicationAccessPolicy). Org-wide chat message subscriptions only work after Microsoft approves protected-API access.",
+    "paymentWebhookSectionTitle": "Payment gateway webhook",
+    "paymentWebhookDescription": "Register this URL in your payment provider so it notifies HedHog of payments, refunds and subscription changes.",
+    "paymentWebhookUrlLabel": "Webhook URL",
+    "paymentWebhookLoading": "Generating URL…",
+    "paymentWebhookUnavailable": "URL unavailable — check the API base URL setting.",
+    "paymentWebhookSaveFirst": "Save the profile to generate the webhook URL.",
+    "paymentWebhookBaseUrlMissing": "URL unavailable — set a public HTTPS API URL (the api-url setting) so the webhook can be registered in the gateway.",
+    "paymentWebhookStepsTitle": "In your payment provider dashboard:",
+    "paymentStripeStep1": "Open Developers → Webhooks and click \"Add endpoint\".",
+    "paymentStripeStep2": "Paste the Webhook URL above as the endpoint URL.",
+    "paymentStripeStep3": "Select the events to send (payment_intent, charge, checkout.session, invoice, customer.subscription).",
+    "paymentStripeStep4": "Copy the endpoint's \"Signing secret\" and paste it into the Webhook Secret field above.",
+    "paymentMercadoPagoStep1": "Open Your integrations → your application → Webhooks / Notifications.",
+    "paymentMercadoPagoStep2": "Paste the Webhook URL above and select the payment and subscription events.",
+    "paymentMercadoPagoStep3": "Save to generate the secret key used for signature validation.",
+    "paymentMercadoPagoStep4": "Copy that secret and paste it into the Webhook Secret field above.",
+    "paymentGooglePlayStep1": "In Google Play Console, open Monetization setup and set the Pub/Sub topic for real-time developer notifications (RTDN).",
+    "paymentGooglePlayStep2": "Create a Pub/Sub push subscription pointing to the Webhook URL above.",
+    "paymentGooglePlayStep3": "Grant the Play publisher service account permission to publish to the topic.",
+    "paymentGooglePlayStep4": "Send a test notification and confirm it arrives.",
+    "paymentWebhookSecretRequiredNote": "In production mode, set the Webhook Secret from the provider — without it, production webhooks are rejected (unsigned requests are not processed).",
+    "paymentGooglePlayNote": "Google Play RTDN is authenticated by Pub/Sub (OIDC push); there is no webhook secret to configure. The subscription state is always re-fetched from the Play Developer API.",
     "fieldBasePath": "Base Path",
     "fieldBucket": "Bucket",
     "fieldProjectId": "Project ID",
@@ -2464,6 +2634,7 @@
     "fieldContainer": "Container",
     "fieldEndpoint": "Endpoint URL",
     "fieldApiKey": "API Key",
+    "fieldModel": "Model",
     "fieldOrganization": "Organization ID",
     "fieldRedirectUri": "Redirect URI",
     "fieldTenantId": "Tenant ID",
@@ -2481,6 +2652,13 @@
     "fieldHmacKey": "HMAC Key",
     "fieldScoreThreshold": "Score Threshold",
     "fieldApiUrl": "API URL",
+    "fieldPackageName": "Android Package Name",
+    "fieldServiceAccountJson": "Service Account JSON",
+    "fieldServiceAccountPrivateKey": "Service Account Private Key (PEM)",
+    "fieldClientEmail": "Service Account Email",
+    "fieldSessionToken": "Session Token (STS)",
+    "fieldRoleArn": "Role ARN",
+    "fieldExternalId": "External ID",
     "callbackUrlsSectionTitle": "Callback URLs",
     "callbackUrlsDescription": "Register these URLs in your OAuth application settings.",
     "addCallbackUrl": "Add URL",
@@ -2535,6 +2713,422 @@
     "fieldTimeoutMs": "Timeout (ms)",
     "fieldMaxRetries": "Max retries",
     "fileStored": "A file is stored and encrypted. Click to replace it.",
-    "fileSelected": "New file selected. It will be encrypted on save."
+    "fileSelected": "New file selected. It will be encrypted on save.",
+    "fieldRtdnServiceAccount": "Notifications Service Account (RTDN)",
+    "fieldRtdnAudience": "Notifications Audience (RTDN)"
+  },
+  "SystemPagesPage": {
+    "title": "Pages",
+    "description": "Catalog of the admin pages, with menu, permissions and endpoints for each one.",
+    "breadcrumbHome": "Home",
+    "breadcrumbManagement": "Management",
+    "newPage": "New page",
+    "statsTotal": "Pages",
+    "statsLibraries": "Libraries",
+    "statsResidue": "Likely residue",
+    "statsWithoutI18n": "Without translation",
+    "searchPlaceholder": "Search by route, file or library",
+    "filterByLibrary": "Library",
+    "allLibraries": "All libraries",
+    "filterByMenuStatus": "Menu link",
+    "allMenuStatuses": "All links",
+    "menuStatusLinked": "With menu",
+    "menuStatusOrphan": "Without menu",
+    "menuStatusResidue": "Likely residue",
+    "viewMode": "View",
+    "viewModeTable": "Table",
+    "viewModeCards": "Cards",
+    "emptyStateTitle": "No page found",
+    "emptyStateDescription": "Adjust the search or the filters to see other pages.",
+    "emptyStateLoading": "Loading menus and permissions...",
+    "columnRoute": "Route",
+    "columnLibrary": "Library",
+    "columnTemplate": "Template",
+    "columnMenu": "Menu",
+    "columnRoles": "Roles",
+    "columnReferences": "References",
+    "columnEndpoints": "Endpoints",
+    "orphanBadge": "No menu",
+    "residueBadge": "Residue",
+    "cardEndpoints": "{count} endpoints",
+    "cardLoc": "{count} lines",
+    "template_list-kpi": "List with KPIs",
+    "template_list-simple": "Simple list",
+    "template_detail-form": "Detail / form",
+    "template_dashboard": "Dashboard",
+    "template_custom": "Custom",
+    "tabOverview": "Overview",
+    "tabMenu": "Menu",
+    "tabPermissions": "Permissions",
+    "tabFiles": "Files",
+    "fieldRoute": "Route",
+    "fieldLibrary": "Library",
+    "fieldTemplate": "Template",
+    "fieldLoc": "Lines",
+    "fieldFile": "File",
+    "fieldNamespaces": "Translation namespaces",
+    "noNamespaces": "No namespace detected",
+    "fieldFeatures": "Detected components",
+    "fieldReferencedBy": "Referenced by",
+    "noReferences": "No code file navigates to this page",
+    "feature_pageHeader": "PageHeader",
+    "feature_kpis": "KPIs",
+    "feature_searchBar": "Search",
+    "feature_pagination": "Pagination",
+    "feature_viewModeToggle": "Table/cards",
+    "feature_formSheet": "Form sheet",
+    "feature_dataTable": "Data table",
+    "feature_widgets": "Widgets",
+    "menuName": "Menu name",
+    "menuSlug": "Slug",
+    "menuUrl": "URL",
+    "menuIcon": "Icon",
+    "menuParent": "Parent menu",
+    "menuRoot": "Root menu",
+    "menuOrder": "Order",
+    "openMenuManager": "Open menu manager",
+    "orphanTitle": "Page without a linked menu",
+    "orphanDescription": "No menu points to {route}. The page exists in the code but is only reachable by direct link.",
+    "menuRolesTitle": "Roles with menu access",
+    "menuRolesDescription": "Roles that see this item in the sidebar.",
+    "noRoles": "No role",
+    "endpointsTitle": "Consumed endpoints",
+    "endpointsDescription": "Inferred from the page and its components; double-check before treating it as the source of truth.",
+    "noEndpoints": "No endpoint detected",
+    "columnMethod": "Method",
+    "columnEndpoint": "Endpoint",
+    "columnEndpointRoles": "Roles",
+    "endpointNotRegistered": "Not registered in routes",
+    "noComponents": "No dedicated components",
+    "filesHint": "Paths relative to the monorepo root.",
+    "deletePage": "Delete page",
+    "deleteHintResidue": "No menu and no code references — likely residue.",
+    "deleteHintReferenced": "{count} file(s) navigate to this page.",
+    "deleteTitle": "Delete page",
+    "deleteConfirmLabel": "Type the exact route to confirm",
+    "deleteConfirm": "Delete from disk",
+    "deleteClose": "Close",
+    "deletePreviewLoading": "Computing what will be removed...",
+    "deletePreviewError": "Could not compute the deletion.",
+    "deleteError": "Could not delete the page.",
+    "deleteMenuError": "Files removed, but the menu was not deleted from the database.",
+    "deleteSuccess": "Page deleted.",
+    "deleteReferencedTitle": "This page is referenced in the code",
+    "deleteReferencedDescription": "{count} file(s) navigate to this route and may break. Review before deleting.",
+    "deleteMenuChildrenTitle": "Menu with submenus",
+    "deleteMenuChildrenDescription": "The menu has child items and will not be removed from the database — only the files will be deleted. Adjust the menu manually under Menus.",
+    "deleteCategory_page": "Page files",
+    "deleteCategory_mirror": "Library mirror",
+    "deleteCategory_i18n": "Translations",
+    "deleteCategory_menu": "Menu (YAML)",
+    "deleteCategory_migration": "Migration",
+    "deleteAction_delete": "delete",
+    "deleteAction_rewrite": "rewrite",
+    "deleteAction_create": "create",
+    "deleteDoneTitle": "Page deleted",
+    "deleteDoneDescription": "The files were removed. Git is the safety net: git checkout / git clean undoes everything.",
+    "deleteDoneSteps": "Next steps"
+  },
+  "PageWizard": {
+    "title": "New page",
+    "description": "Generates the page, translations, menu and library CRUD following the repository standard. Development only.",
+    "steps": {
+      "target": "Target",
+      "template": "Template",
+      "columns": "Data model",
+      "backend": "Backend",
+      "menu": "Menu and roles",
+      "review": "Review"
+    },
+    "fieldLibrary": "Library",
+    "fieldLibraryPlaceholder": "Select the library",
+    "fieldEntity": "Entity",
+    "fieldEntityHint": "Singular snake_case. Also the table name.",
+    "fieldRoute": "Page route",
+    "fieldApiBasePath": "API prefix",
+    "fieldLabelPt": "Title (pt)",
+    "fieldLabelEn": "Title (en)",
+    "fieldDescriptionPt": "Description (pt)",
+    "fieldDescriptionEn": "Description (en)",
+    "template_list-kpi": "List with KPIs",
+    "template_list-simple": "Simple list",
+    "template_detail-form": "Detail / form",
+    "template_dashboard": "Dashboard",
+    "templateHint_list-kpi": "PageHeader, KPIs, search with filters, table/cards, pagination and form sheet.",
+    "templateHint_list-simple": "Same listing without the KPI row. For auxiliary lookups.",
+    "templateHint_detail-form": "Single form, settings-like: loads with GET and saves with PATCH.",
+    "templateHint_dashboard": "Panel with KPIs and a widget area, without a paginated list.",
+    "columnsHint": "User-facing text must use locale_varchar/locale_text so the translation table is generated.",
+    "columnName": "Column",
+    "columnLabelPt": "Label (pt)",
+    "columnLabelEn": "Label (en)",
+    "columnEnumValues": "Comma-separated values",
+    "columnReferences": "Referenced table",
+    "columnNullable": "Nullable",
+    "columnInList": "In the list",
+    "columnInFilters": "As a filter",
+    "addColumn": "Add column",
+    "generateBackend": "Generate backend",
+    "generateBackendHint": "Creates table YAML, migration, DTO, service, controller and NestJS module.",
+    "menuParent": "Parent menu",
+    "menuRoot": "Root menu",
+    "menuIcon": "Icon",
+    "menuOrder": "Order",
+    "rolesTitle": "Roles with access",
+    "rolesHint": "The admin role is always included.",
+    "issuesTitle": "Fix before generating",
+    "conflictsTitle": "Files already exist",
+    "overwrite": "Overwrite the existing files",
+    "previewLoading": "Building preview...",
+    "previewError": "Could not build the preview.",
+    "applyError": "Could not write the files.",
+    "applySuccess": "{count} files written.",
+    "action_create": "create",
+    "action_merge": "append",
+    "action_patch": "patch",
+    "action_manual": "manual",
+    "back": "Back",
+    "next": "Next",
+    "refreshPreview": "Refresh preview",
+    "generate": "Generate files",
+    "close": "Close",
+    "doneTitle": "Files generated",
+    "doneDescription": "{count} files were written to the repository.",
+    "doneFiles": "Files",
+    "doneSteps": "Next steps",
+    "doneStepsHint": "The wizard does not run commands. Review the generated migration before applying it."
+  },
+  "Incidents": {
+    "breadcrumbHome": "Home",
+    "breadcrumbTitle": "Incidents",
+    "title": "Incidents",
+    "description": "Failures that would otherwise be swallowed silently by the system.",
+    "kpiOpen": "Open",
+    "kpiCritical": "Critical",
+    "kpiOccurrences": "Occurrences",
+    "kpiResolved": "Resolved",
+    "searchPlaceholder": "Search by message, code or source",
+    "filterByStatus": "Status",
+    "statusOpen": "Open",
+    "statusResolved": "Resolved",
+    "statusAll": "All",
+    "filterBySeverity": "Severity",
+    "severityAll": "All severities",
+    "severityCritical": "Critical",
+    "severityError": "Error",
+    "severityWarning": "Warning",
+    "severity_critical": "Critical",
+    "severity_error": "Error",
+    "severity_warning": "Warning",
+    "filterBySource": "Source",
+    "sourceAll": "All sources",
+    "columnSeverity": "Severity",
+    "columnSource": "Source",
+    "columnMessage": "Message",
+    "columnOccurrences": "Occurrences",
+    "columnLastSeen": "Last seen",
+    "firstSeen": "First seen",
+    "context": "Context",
+    "resolve": "Mark as resolved",
+    "reopen": "Reopen",
+    "emptyTitle": "No open incidents",
+    "emptyDescription": "Nothing failed silently in this period."
+  },
+  "AiInstructionPage": {
+    "breadcrumbDashboard": "Dashboard",
+    "breadcrumbManagement": "Management",
+    "breadcrumbCurrent": "AI Prompts",
+    "title": "AI Prompts",
+    "description": "View and edit every prompt the system sends to AI models, grouped by module. Each prompt keeps a canonical copy in code: if a stored prompt is missing, empty or invalid, that copy is used instead and the flow keeps working.",
+    "searchPlaceholder": "Search by slug or name...",
+    "loading": "Loading...",
+    "empty": "No prompts found",
+    "emptyDescription": "Adjust the filters or clear the search to see the registered prompts.",
+    "edit": "Edit",
+    "cancel": "Cancel",
+    "save": "Save",
+    "saving": "Saving...",
+    "saveSuccess": "Prompt saved.",
+    "saveError": "Could not save the prompt.",
+    "filterLayer": "Layer",
+    "filterModule": "Module",
+    "filterStatus": "Status",
+    "filterAllLayers": "All layers",
+    "filterAllModules": "All modules",
+    "filterAllStatuses": "All statuses",
+    "filterActive": "Active",
+    "filterInactive": "Inactive",
+    "layer_task": "Task",
+    "layer_system": "System",
+    "layer_product": "Product",
+    "layer_module": "Module",
+    "layer_agent": "Agent",
+    "layer_tool": "Tool",
+    "layer_output": "Output",
+    "columnName": "Name",
+    "columnLayer": "Layer",
+    "columnModule": "Module",
+    "columnParams": "Parameters",
+    "columnState": "State",
+    "columnUpdatedAt": "Updated",
+    "badgeDefault": "Default",
+    "badgeCustomized": "Customized",
+    "badgeLocked": "Locked",
+    "badgeInactive": "Inactive",
+    "tabContent": "Content",
+    "tabVariables": "Variables",
+    "tabPreview": "Preview",
+    "tabHistory": "History",
+    "fieldSlug": "Slug",
+    "fieldName": "Name",
+    "fieldLocale": "Language",
+    "fieldIsActive": "Active",
+    "fieldContent": "Prompt content",
+    "fieldChangeNote": "Change note",
+    "fieldModel": "Model",
+    "fieldTemperature": "Temperature",
+    "fieldMaxTokens": "Max tokens",
+    "slugImmutable": "The slug cannot be changed: the code resolves the prompt by it.",
+    "copySlug": "Copy slug",
+    "slugCopied": "Slug copied.",
+    "isActiveHint": "When inactive, the flow uses the copy in the code.",
+    "changeNotePlaceholder": "What changed and why",
+    "charCountWithTokens": "{chars} characters · ~{tokens} tokens",
+    "restoreDefault": "Restore default",
+    "restoreDefaultApplied": "Default content applied. Save to confirm.",
+    "inheritPlaceholder": "inherit",
+    "modelParamsTitle": "Model parameters",
+    "modelParamsHint": "Leave empty to keep what the integration profile or the code already uses.",
+    "unbalancedBlocksError": "Unclosed template block: {blocks}. This would discard the rest of the prompt.",
+    "missingRequiredError": "Required variables missing from the content: {variables}.",
+    "missingPhrasesWarning": "Safety phrases removed: {phrases}.",
+    "allPhrasesMissingWarning": "Every safety phrase was removed. At runtime this prompt will be ignored and the copy in the code will be used instead.",
+    "lockedTitle": "Security-sensitive prompt",
+    "lockedDescription": "This prompt is the prompt-injection defence for automated grading. Changing it can allow grade manipulation.",
+    "unlockEditing": "Unlock editing",
+    "unlockDialogTitle": "Unlock editing",
+    "unlockDialogDescription": "Type the prompt slug to confirm you reviewed the security impact of this change.",
+    "variablesEmpty": "This prompt takes no variables.",
+    "variablesFromCode": "Variables declared in code. The prompt must keep using the required ones.",
+    "columnVariable": "Variable",
+    "columnVariableType": "Type",
+    "columnVariableRequired": "Required",
+    "columnVariableDescription": "Description",
+    "variableRequired": "Required",
+    "variableConditional": "Conditional",
+    "previewNoVariables": "This prompt takes no variables; render it to see the final text.",
+    "previewRender": "Render",
+    "previewRendering": "Rendering...",
+    "previewError": "Could not render the preview.",
+    "versionsEmpty": "No versions recorded yet.",
+    "versionsSelectHint": "Select a version to compare it with the current content.",
+    "versionCurrent": "current",
+    "columnVersionDate": "Date",
+    "columnVersionAuthor": "Author",
+    "columnVersionNote": "Note",
+    "columnVersionSize": "Chars",
+    "restoreVersion": "Restore",
+    "restoring": "Restoring...",
+    "restoreSuccess": "Version {version} restored as a new version.",
+    "restoreError": "Could not restore the version.",
+    "restoreDialogTitle": "Restore version",
+    "restoreDialogDescription": "The content of version {version} becomes a new version on top of the current one. Nothing is deleted.",
+    "diffCurrentLabel": "current",
+    "diffVersionLabel": "version {version}",
+    "diffIdentical": "This version is identical to the current content."
+  },
+  "HtmlCodeEditor": {
+    "zoomIn": "Increase font size",
+    "zoomOut": "Decrease font size",
+    "resetZoom": "Reset zoom"
+  },
+  "HtmlContentEditor": {
+    "tabPreview": "Preview",
+    "tabEditor": "Editor",
+    "tabCode": "HTML",
+    "previewTitle": "HTML preview",
+    "noContent": "No content to preview",
+    "complexHtmlWarningTitle": "Complex HTML detected",
+    "complexHtmlWarningDesc": "This content has style, head or script tags that the visual editor removes. Use the HTML tab to edit it.",
+    "aiEditTitle": "Adjust HTML with AI",
+    "aiInstructionPlaceholder": "Describe the adjustment the AI should make to this HTML.",
+    "aiApplyButton": "Adjust with AI",
+    "aiApplying": "Adjusting...",
+    "aiEditAppliedDefault": "HTML adjusted by AI. Review before saving.",
+    "aiEditErrorDefault": "Could not adjust the HTML with AI.",
+    "enterFullscreen": "Fullscreen",
+    "exitFullscreen": "Exit fullscreen",
+    "enterSplitView": "View panels side by side",
+    "exitSplitView": "View as tabs",
+    "splitViewLabel": "Preview, HTML and AI side by side"
+  },
+  "MailLayoutPage": {
+    "breadcrumbHome": "Home",
+    "breadcrumbMail": "Email Templates",
+    "breadcrumbTitle": "Base Layout",
+    "title": "Base Layout",
+    "description": "Wrapper, header and footer applied to every email the system sends",
+    "save": "Save layout",
+    "saving": "Saving...",
+    "localeLabel": "Language",
+    "tabHeader": "Header",
+    "tabFooter": "Footer",
+    "tabWrapper": "Wrapper",
+    "headerHelp": "Fragment rendered above the message content. Translated per language.",
+    "footerHelp": "Fragment rendered below the message content. Translated per language.",
+    "wrapperHelp": "Full HTML document with the structure and CSS. Shared by every language, so it is edited as raw HTML only.",
+    "tokensHelp": "Available tokens:",
+    "sampleSubject": "Sample subject",
+    "sampleBody": "Hello,<br>This is a sample body used only to preview the base layout.<br>Best regards.",
+    "loadError": "Failed to load the base layout",
+    "saveSuccess": "Base layout saved",
+    "saveError": "Failed to save the base layout",
+    "missingContentTokenError": "The wrapper must contain the {{{content}}} token, otherwise every email would be sent empty."
+  },
+  "KnownDevices": {
+    "title": "Known Devices",
+    "description": "Devices your account already recognizes. A sign-in from a device outside this list triggers an email alert.",
+    "adminDescription": "Devices this user's account already recognizes.",
+    "device": "Device",
+    "browser": "Browser",
+    "lastIp": "Last IP",
+    "lastSeen": "Last seen",
+    "firstSeen": "First seen",
+    "action": "Action",
+    "unknown": "Unknown",
+    "forget": "Forget",
+    "noDevices": "No recognized devices yet",
+    "forgetTitle": "Forget device",
+    "forgetDescription": "The next sign-in from this device will be treated as unrecognized and will trigger an email alert. Sessions already open on it stay valid — revoke the sessions to end those.",
+    "cancel": "Cancel",
+    "forgetSuccess": "Device forgotten",
+    "forgetFailure": "Could not forget the device",
+    "simulatedNotRecorded": "Simulated accesses are not recorded as devices — see the sessions tab."
+  },
+  "AccessSimulation": {
+    "action": "Simulate access",
+    "dialogTitle": "Simulate access",
+    "dialogDescription": "Open a short, audited session seeing the system as {name}. Everything you do is recorded under their name and yours.",
+    "targetApp": "Target application",
+    "targetAppPlaceholder": "Choose where to open the session",
+    "noAppsConfigured": "No application has a URL configured in the app-urls setting.",
+    "reason": "Reason (optional)",
+    "reasonPlaceholder": "Ticket, request or context for this simulation",
+    "auditWarning": "The simulation is recorded in the sessions, access log and activity timeline of both users. It lasts 30 minutes and cannot be renewed.",
+    "confirm": "Start simulation",
+    "cancel": "Cancel",
+    "opening": "Opening…",
+    "startFailure": "Could not start the access simulation.",
+    "bannerViewingAs": "SIMULATED ACCESS — you are seeing the system as",
+    "bannerOperator": "Operator",
+    "bannerExpiresIn": "expires in",
+    "bannerStop": "End simulation",
+    "bannerStopping": "Ending…",
+    "redeemLoading": "Starting access simulation…",
+    "redeemInvalidTitle": "Simulation link is no longer valid",
+    "redeemInvalidDescription": "This link works only once and expires after a minute. Ask the operator to start a new simulation.",
+    "redeemMissingCode": "No simulation code found in the link.",
+    "noAdminAccessTitle": "This user has no access to the admin panel",
+    "noAdminAccessDescription": "{name} has no administrative role, so there is nothing to show here. Simulate them in the application they actually use."
   }
 }