@protobase/ui 0.25.2 → 0.25.4

package/dist/account/account-pages.js

@@ -1,3 +1,4 @@
+import { text } from "./messages.js";
 import { KeyRound, ShieldCheck } from "lucide-react";
 //#region src/account/account-pages.ts
 const accountSecurityPath = "/-/account";
@@ -5,13 +6,13 @@ const signInPolicyPath = "/-/sign-in-policy";
 /** The app's own pages for the signed-in person, at the end of the profile menu: their sign-in, and for admins the policy. */
 const accountMenuItems = (basePath, path, admin) => [{
 	id: "account-security",
-	label: "Sign-in & security",
+	label: text("signInSecurity"),
 	icon: KeyRound,
 	href: `${basePath}${accountSecurityPath}`,
 	active: path === accountSecurityPath
 }, ...admin ? [{
 	id: "sign-in-policy",
-	label: "Sign-in policy",
+	label: text("signInPolicy"),
 	icon: ShieldCheck,
 	href: `${basePath}${signInPolicyPath}`,
 	active: path === signInPolicyPath

package/dist/account/account-section.js

@@ -24,7 +24,7 @@ const AccountSection = ({ title, status, description, children }) => /* @__PURE_
 });
 const SectionError = ({ message }) => message ? /* @__PURE__ */ jsx("p", {
 	role: "alert",
-	className: "mb-3 text-xs font-medium text-danger-text",
+	className: "mb-3 text-body font-medium text-danger-text",
 	children: message
 }) : null;
 //#endregion

package/dist/account/account-security-page.js

@@ -1,3 +1,4 @@
+import { text } from "./messages.js";
 import { Spinner } from "../primitives/spinner.js";
 import { PageHeader } from "../app-shell/page-header.js";
 import { authMessage, providerMessage } from "../auth/auth-messages.js";
@@ -32,14 +33,14 @@ const AccountSecurityPage = ({ email }) => {
 			methods,
 			passkeys,
 			linked
-		}), (failure) => setError(failure instanceof AuthError ? authMessage(failure) : "Could not read your sign-in methods"));
+		}), (failure) => setError(failure instanceof AuthError ? authMessage(failure) : text("couldNotReadMethods")));
 	}, [account]);
 	useEffect(reload, [reload]);
 	const thenReload = (change) => change.then((result) => (reload(), result));
 	return /* @__PURE__ */ jsxs("div", {
 		className: "mx-auto flex w-full max-w-3xl flex-col gap-4 px-4 py-6 md:px-6",
 		children: [/* @__PURE__ */ jsx(PageHeader, {
-			title: "Sign-in & security",
+			title: text("signInSecurity"),
 			subtitle: email
 		}), loaded ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
 			/* @__PURE__ */ jsx(PasskeysSection, {
@@ -66,7 +67,7 @@ const AccountSecurityPage = ({ email }) => {
 				providers: linkable,
 				linked: loaded.linked,
 				onConnect: linkProvider,
-				error: linkError && providerMessage(linkError, linkable.length === 1 ? linkable[0].name : "the provider")
+				error: linkError && providerMessage(linkError, linkable.length === 1 ? linkable[0].name : text("theProvider"))
 			})
 		] }) : error ? /* @__PURE__ */ jsx("p", {
 			role: "alert",
@@ -74,7 +75,11 @@ const AccountSecurityPage = ({ email }) => {
 			children: error
 		}) : /* @__PURE__ */ jsxs("div", {
 			className: "flex items-center gap-2 text-muted-foreground",
-			children: [/* @__PURE__ */ jsx(Spinner, {}), " Loading"]
+			children: [
+				/* @__PURE__ */ jsx(Spinner, {}),
+				" ",
+				text("loading")
+			]
 		})]
 	});
 };

package/dist/account/backup-codes.js

@@ -1,3 +1,4 @@
+import { text } from "./messages.js";
 import { Button } from "../primitives/button.js";
 import { saveFile } from "../lib/save-file.js";
 import { useState } from "react";
@@ -7,11 +8,11 @@ import { jsx, jsxs } from "react/jsx-runtime";
 /** The backup codes, shown once, with ways to keep them: each works once instead of a code from the app. */
 const BackupCodes = ({ codes }) => {
 	const [copied, setCopied] = useState(false);
-	const text = `${codes.join("\n")}\n`;
+	const lines = `${codes.join("\n")}\n`;
 	return /* @__PURE__ */ jsxs("div", {
 		className: "flex flex-col gap-3",
 		children: [/* @__PURE__ */ jsx("ul", {
-			"aria-label": "Backup codes",
+			"aria-label": text("backupCodes"),
 			className: "grid grid-cols-2 gap-x-4 gap-y-1 rounded-md border bg-surface p-3 font-mono",
 			children: codes.map((code) => /* @__PURE__ */ jsx("li", { children: code }, code))
 		}), /* @__PURE__ */ jsxs("div", {
@@ -19,16 +20,16 @@ const BackupCodes = ({ codes }) => {
 			children: [/* @__PURE__ */ jsxs(Button, {
 				size: "sm",
 				onClick: () => {
-					navigator.clipboard.writeText(text).then(() => {
+					navigator.clipboard.writeText(lines).then(() => {
 						setCopied(true);
 						setTimeout(() => setCopied(false), 2e3);
 					});
 				},
-				children: [copied ? /* @__PURE__ */ jsx(Check, { className: "size-3.5 text-success" }) : /* @__PURE__ */ jsx(Copy, { className: "size-3.5" }), copied ? "Copied" : "Copy"]
+				children: [copied ? /* @__PURE__ */ jsx(Check, { className: "size-3.5 text-success" }) : /* @__PURE__ */ jsx(Copy, { className: "size-3.5" }), copied ? text("copied") : text("copy")]
 			}), /* @__PURE__ */ jsxs(Button, {
 				size: "sm",
-				onClick: () => saveFile(text, "backup-codes.txt"),
-				children: [/* @__PURE__ */ jsx(Download, { className: "size-3.5" }), "Download"]
+				onClick: () => saveFile(lines, "backup-codes.txt"),
+				children: [/* @__PURE__ */ jsx(Download, { className: "size-3.5" }), text("download")]
 			})]
 		})]
 	});

package/dist/account/messages.js

@@ -0,0 +1,214 @@
+import { defineMessages } from "../locale/messages.js";
+//#region src/account/messages.ts
+const text = defineMessages({
+	en: {
+		signInSecurity: "Sign-in & security",
+		signInPolicy: "Sign-in policy",
+		couldNotReadMethods: "Could not read your sign-in methods",
+		theProvider: "the provider",
+		loading: "Loading",
+		backupCodes: "Backup codes",
+		copied: "Copied",
+		copy: "Copy",
+		download: "Download",
+		cancel: "Cancel",
+		save: "Save",
+		name: "Name",
+		yourPassword: "Your password",
+		continue: "Continue",
+		on: "On",
+		off: "Off",
+		optional: "Optional",
+		required: "Required",
+		passkeys: "Passkeys",
+		passkey: "Passkey",
+		passkeysAllowed: "Sign in with Face ID, Touch ID, Windows Hello, your phone or a security key instead of a password.",
+		passkeysRequired: "This app requires a passkey for every account. Sign in with Face ID, Touch ID, Windows Hello, your phone or a security key.",
+		passkeysForbidden: "Your admin turned passkeys off for this app, so they cannot be used to sign in.",
+		addedOn: (date) => `Added ${date}`,
+		addedEarlier: "Added earlier",
+		synced: "Synced across your devices",
+		oneDevice: "On one device",
+		rename: "Rename",
+		remove: "Remove",
+		keepLastPasskey: "Passkeys are required: add another one before removing this one.",
+		addPasskey: "Add a passkey",
+		renamePasskey: "Rename passkey",
+		renamePasskeyDescription: "A name that tells you where this passkey lives, such as the device or password manager.",
+		removePasskey: "Remove passkey?",
+		removePasskeyDescription: (name) => `${name} will no longer sign you in here. It stays on the device until you delete it there.`,
+		thisPasskey: "This passkey",
+		connectedAccounts: "Connected accounts",
+		connectedAccountsDescription: "Sign in with these instead of your password. Connecting one asks you to sign in there; its address may differ from yours here.",
+		connected: "Connected",
+		connect: (name) => `Connect ${name}`,
+		stopped: (time) => `Stopped ${time}`,
+		ended: (time) => `Ended ${time}`,
+		signedInUntil: (time) => `Signed in until ${time}`,
+		staffSignIns: "Staff sign-ins",
+		staffSignInsDescription: (operator) => `Each time staff of ${operator} signed in as someone here, newest first.`,
+		noStaffSignIns: "No staff has signed in as anyone yet.",
+		as: "as",
+		qrCode: "QR code for your authenticator app",
+		twoFactor: "Two-factor authentication",
+		twoFactorAllowed: "Ask for a second step after your password or an emailed sign-in code: a code from an authenticator app, or one emailed to you. A passkey needs no second step.",
+		twoFactorRequired: "This app requires two-factor authentication for every account. Turn it on to keep using the app.",
+		twoFactorForbidden: "Your admin turned two-factor authentication off for this app.",
+		twoFactorOnWithApp: "Signing in with a password or an emailed sign-in code also asks for a code from your authenticator app. Backup codes work when you do not have the app.",
+		twoFactorOnWithAppOrMail: "Signing in with a password or an emailed sign-in code also asks for a code from your authenticator app, or one emailed to you. Backup codes work when you do not have the app.",
+		twoFactorOnWithMail: "Signing in with a password or an emailed sign-in code also asks for a code emailed to you.",
+		turnOn: "Turn on",
+		turnOff: "Turn off",
+		addAuthenticator: "Add an authenticator app",
+		newBackupCodes: "New backup codes",
+		twoFactorIsRequired: "This app requires two-factor authentication.",
+		turnOffTitle: "Turn off two-factor authentication?",
+		turnOffDescription: "Signing in then needs only your password or an emailed code. Your backup codes stop working.",
+		newCodesTitle: "Make new backup codes?",
+		newCodesDescription: "Your current backup codes stop working, and you get ten new ones.",
+		makeNewCodes: "Make new codes",
+		yourNewCodes: "Your new backup codes",
+		keepCodesSafe: "Keep them somewhere safe: each one signs you in once if you lose your phone. They are not shown again.",
+		savedCodes: "I saved my backup codes",
+		authenticatorApp: "Authenticator app",
+		authenticatorAppDescription: "A code from an app such as Google Authenticator, Microsoft Authenticator or 1Password. Comes with backup codes.",
+		emailedCode: "Emailed code",
+		emailedCodeDescription: "A code mailed to your address each time you sign in with a password or an emailed sign-in code.",
+		twoFactorIsOn: "Two-factor authentication is on. Keep these backup codes somewhere safe: each one signs you in once if you lose your phone. They are not shown again.",
+		scanCode: "Scan this code with your authenticator app, then enter the 6-digit code it shows.",
+		cannotScan: "Can't scan it? Enter this key in the app:",
+		codeFromApp: "Code from the app",
+		secondStep: "Second step",
+		password: "Password",
+		passwordDescription: "Sign in with the email address and a password.",
+		emailedSignInCode: "Emailed sign-in code",
+		emailedSignInCodeDescription: "Sign in with a one-time code mailed to the account's address.",
+		passkeysPolicyDescription: "Sign in with Face ID, Touch ID, Windows Hello, a phone or a security key. Required: everyone adds one after signing in.",
+		twoFactorPolicyDescription: "A code from an authenticator app, or an emailed one, after a password or an emailed sign-in code. Required: everyone turns it on after signing in.",
+		staffAccess: "Staff sign-in as a person",
+		staffAccessDescription: "The team that runs this app signs in as someone to help them, with a reason, for a short session. Each time is in the log below; with \"Email the person\" they are told too.",
+		emailThePerson: "Email the person",
+		platformSignIn: "Sign-in through the platform",
+		platformSignInDescription: "The sign-in provider the platform that runs this app adds, for people who have an account here already. It never creates accounts.",
+		platformSignInWith: (provider) => `Sign in with ${provider} through the platform`,
+		codeNeedsMail: "Needs mail settings (PROTOBASE_SMTP_URL and PROTOBASE_MAIL_FROM): off until they are set.",
+		passwordStaysOn: "Without mail settings, password sign-in stays on so nobody is locked out.",
+		staffNeedsMail: "Needs mail settings (PROTOBASE_SMTP_URL and PROTOBASE_MAIL_FROM): staff cannot sign in until they are set.",
+		platformOff: "Off while passkeys or two-factor authentication are required: it skips the second step.",
+		appliesAs: (rule) => `Applies as ${rule} for now.`,
+		lastSaved: (time) => `Last saved on ${time}.`,
+		lastSavedBy: (name, time) => `Last saved by ${name} on ${time}.`,
+		neverChanged: "Never changed: everything is on, nothing is required.",
+		reset: "Reset",
+		couldNotReadStaffSignIns: "Could not read the staff sign-ins",
+		couldNotReadPolicy: "Could not read the sign-in policy",
+		policySaved: "Saved. It applies to every sign-in from now on.",
+		policySubtitle: "How people sign in to this app. Signed-in people keep their session, and are asked for what is newly required within 15 minutes."
+	},
+	nl: {
+		signInSecurity: "Inloggen en beveiliging",
+		signInPolicy: "Inlogbeleid",
+		couldNotReadMethods: "Kon je inlogmethoden niet lezen",
+		theProvider: "de provider",
+		loading: "Laden",
+		backupCodes: "Back-upcodes",
+		copied: "Gekopieerd",
+		copy: "Kopiëren",
+		download: "Downloaden",
+		cancel: "Annuleren",
+		save: "Bewaren",
+		name: "Naam",
+		yourPassword: "Je wachtwoord",
+		continue: "Doorgaan",
+		on: "Aan",
+		off: "Uit",
+		optional: "Optioneel",
+		required: "Verplicht",
+		passkeys: "Passkeys",
+		passkey: "Passkey",
+		passkeysAllowed: "Log in met Face ID, Touch ID, Windows Hello, je telefoon of een beveiligingssleutel in plaats van een wachtwoord.",
+		passkeysRequired: "Deze app vraagt een passkey voor elk account. Log in met Face ID, Touch ID, Windows Hello, je telefoon of een beveiligingssleutel.",
+		passkeysForbidden: "Je beheerder heeft passkeys uitgezet voor deze app, dus je kunt er niet mee inloggen.",
+		addedOn: (date) => `Toegevoegd ${date}`,
+		addedEarlier: "Eerder toegevoegd",
+		synced: "Gesynchroniseerd op je apparaten",
+		oneDevice: "Op één apparaat",
+		rename: "Naam wijzigen",
+		remove: "Verwijderen",
+		keepLastPasskey: "Passkeys zijn verplicht: voeg er nog een toe voordat je deze verwijdert.",
+		addPasskey: "Passkey toevoegen",
+		renamePasskey: "Naam van passkey wijzigen",
+		renamePasskeyDescription: "Een naam die zegt waar deze passkey staat, zoals het apparaat of de wachtwoordbeheerder.",
+		removePasskey: "Passkey verwijderen?",
+		removePasskeyDescription: (name) => `Met ${name} log je hier niet meer in. Die blijft op het apparaat tot je die daar verwijdert.`,
+		thisPasskey: "deze passkey",
+		connectedAccounts: "Gekoppelde accounts",
+		connectedAccountsDescription: "Log hiermee in in plaats van met je wachtwoord. Koppelen vraagt je daar in te loggen; het adres daar kan anders zijn dan hier.",
+		connected: "Gekoppeld",
+		connect: (name) => `${name} koppelen`,
+		stopped: (time) => `Gestopt ${time}`,
+		ended: (time) => `Afgelopen ${time}`,
+		signedInUntil: (time) => `Ingelogd tot ${time}`,
+		staffSignIns: "Inlogs van medewerkers",
+		staffSignInsDescription: (operator) => `Elke keer dat een medewerker van ${operator} hier als iemand anders inlogde, nieuwste eerst.`,
+		noStaffSignIns: "Nog geen medewerker heeft als iemand anders ingelogd.",
+		as: "als",
+		qrCode: "QR-code voor je authenticator-app",
+		twoFactor: "Tweestapsverificatie",
+		twoFactorAllowed: "Vraag een tweede stap na je wachtwoord of een gemailde inlogcode: een code uit een authenticator-app, of een die je gemaild krijgt. Een passkey heeft geen tweede stap nodig.",
+		twoFactorRequired: "Deze app vraagt tweestapsverificatie voor elk account. Zet het aan om de app te blijven gebruiken.",
+		twoFactorForbidden: "Je beheerder heeft tweestapsverificatie uitgezet voor deze app.",
+		twoFactorOnWithApp: "Inloggen met een wachtwoord of een gemailde inlogcode vraagt ook een code uit je authenticator-app. Back-upcodes werken als je de app niet bij de hand hebt.",
+		twoFactorOnWithAppOrMail: "Inloggen met een wachtwoord of een gemailde inlogcode vraagt ook een code uit je authenticator-app, of een die je gemaild krijgt. Back-upcodes werken als je de app niet bij de hand hebt.",
+		twoFactorOnWithMail: "Inloggen met een wachtwoord of een gemailde inlogcode vraagt ook een code die je gemaild krijgt.",
+		turnOn: "Aanzetten",
+		turnOff: "Uitzetten",
+		addAuthenticator: "Authenticator-app toevoegen",
+		newBackupCodes: "Nieuwe back-upcodes",
+		twoFactorIsRequired: "Deze app vraagt tweestapsverificatie.",
+		turnOffTitle: "Tweestapsverificatie uitzetten?",
+		turnOffDescription: "Inloggen vraagt dan alleen je wachtwoord of een gemailde code. Je back-upcodes werken niet meer.",
+		newCodesTitle: "Nieuwe back-upcodes maken?",
+		newCodesDescription: "Je huidige back-upcodes werken niet meer, en je krijgt tien nieuwe.",
+		makeNewCodes: "Nieuwe codes maken",
+		yourNewCodes: "Je nieuwe back-upcodes",
+		keepCodesSafe: "Bewaar ze op een veilige plek: met elke code log je één keer in als je je telefoon kwijt bent. Ze worden niet opnieuw getoond.",
+		savedCodes: "Ik heb mijn back-upcodes bewaard",
+		authenticatorApp: "Authenticator-app",
+		authenticatorAppDescription: "Een code uit een app zoals Google Authenticator, Microsoft Authenticator of 1Password. Met back-upcodes.",
+		emailedCode: "Gemailde code",
+		emailedCodeDescription: "Een code naar je adres, elke keer dat je inlogt met een wachtwoord of een gemailde inlogcode.",
+		twoFactorIsOn: "Tweestapsverificatie staat aan. Bewaar deze back-upcodes op een veilige plek: met elke code log je één keer in als je je telefoon kwijt bent. Ze worden niet opnieuw getoond.",
+		scanCode: "Scan deze code met je authenticator-app en vul daarna de code van 6 cijfers in die de app toont.",
+		cannotScan: "Lukt scannen niet? Vul deze sleutel in de app in:",
+		codeFromApp: "Code uit de app",
+		secondStep: "Tweede stap",
+		password: "Wachtwoord",
+		passwordDescription: "Inloggen met het e-mailadres en een wachtwoord.",
+		emailedSignInCode: "Gemailde inlogcode",
+		emailedSignInCodeDescription: "Inloggen met een eenmalige code naar het adres van het account.",
+		passkeysPolicyDescription: "Inloggen met Face ID, Touch ID, Windows Hello, een telefoon of een beveiligingssleutel. Verplicht: iedereen voegt er een toe na het inloggen.",
+		twoFactorPolicyDescription: "Een code uit een authenticator-app, of een gemailde, na een wachtwoord of een gemailde inlogcode. Verplicht: iedereen zet het aan na het inloggen.",
+		staffAccess: "Medewerker logt in als iemand anders",
+		staffAccessDescription: "Het team dat deze app beheert, logt in als iemand om die te helpen, met een reden, voor een korte sessie. Elke keer staat in het logboek hieronder; met \"De persoon mailen\" krijgt die het ook te horen.",
+		emailThePerson: "De persoon mailen",
+		platformSignIn: "Inloggen via het platform",
+		platformSignInDescription: "De inlogprovider die het platform van deze app toevoegt, voor mensen die hier al een account hebben. Die maakt nooit accounts.",
+		platformSignInWith: (provider) => `Inloggen met ${provider} via het platform`,
+		codeNeedsMail: "Vraagt mailinstellingen (PROTOBASE_SMTP_URL en PROTOBASE_MAIL_FROM): uit tot die zijn ingesteld.",
+		passwordStaysOn: "Zonder mailinstellingen blijft inloggen met een wachtwoord aan, zodat niemand wordt buitengesloten.",
+		staffNeedsMail: "Vraagt mailinstellingen (PROTOBASE_SMTP_URL en PROTOBASE_MAIL_FROM): medewerkers kunnen niet inloggen tot die zijn ingesteld.",
+		platformOff: "Uit zolang passkeys of tweestapsverificatie verplicht zijn: het slaat de tweede stap over.",
+		appliesAs: (rule) => `Geldt voorlopig als ${rule}.`,
+		lastSaved: (time) => `Laatst bewaard op ${time}.`,
+		lastSavedBy: (name, time) => `Laatst bewaard door ${name} op ${time}.`,
+		neverChanged: "Nooit gewijzigd: alles staat aan, niets is verplicht.",
+		reset: "Terugzetten",
+		couldNotReadStaffSignIns: "Kon de inlogs van medewerkers niet lezen",
+		couldNotReadPolicy: "Kon het inlogbeleid niet lezen",
+		policySaved: "Bewaard. Het geldt vanaf nu voor elke inlog.",
+		policySubtitle: "Hoe mensen inloggen bij deze app. Wie is ingelogd, houdt de sessie en krijgt binnen 15 minuten de vraag naar wat nieuw verplicht is."
+	}
+});
+//#endregion
+export { text };

package/dist/account/passkeys-section.js

@@ -1,3 +1,4 @@
+import { text } from "./messages.js";
 import { Badge } from "../primitives/badge.js";
 import { Input } from "../primitives/input.js";
 import { authMessage } from "../auth/auth-messages.js";
@@ -11,9 +12,9 @@ import { AuthError } from "@protobase/client";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
 //#region src/account/passkeys-section.tsx
 const descriptions = {
-	allowed: "Sign in with Face ID, Touch ID, Windows Hello, your phone or a security key instead of a password.",
-	required: "This app requires a passkey for every account. Sign in with Face ID, Touch ID, Windows Hello, your phone or a security key.",
-	forbidden: "Your admin turned passkeys off for this app, so they cannot be used to sign in."
+	allowed: "passkeysAllowed",
+	required: "passkeysRequired",
+	forbidden: "passkeysForbidden"
 };
 const PasskeysSection = ({ rule, passkeys, onAdd, onRename, onRemove }) => {
 	const [busy, setBusy] = useState(false);
@@ -34,12 +35,12 @@ const PasskeysSection = ({ rule, passkeys, onAdd, onRename, onRemove }) => {
 		setBusy(false);
 	};
 	return /* @__PURE__ */ jsxs(AccountSection, {
-		title: "Passkeys",
+		title: text("passkeys"),
 		status: rule === "required" && /* @__PURE__ */ jsx(Badge, {
 			tone: "blue",
-			children: "Required"
+			children: text("required")
 		}),
-		description: descriptions[rule],
+		description: text(descriptions[rule]),
 		children: [
 			/* @__PURE__ */ jsx(SectionError, { message: editing ? void 0 : error }),
 			passkeys.length > 0 && /* @__PURE__ */ jsx("ul", {
@@ -52,13 +53,13 @@ const PasskeysSection = ({ rule, passkeys, onAdd, onRename, onRemove }) => {
 							className: "min-w-0 flex-1",
 							children: [/* @__PURE__ */ jsx("span", {
 								className: "block truncate font-medium",
-								children: passkey.name ?? "Passkey"
+								children: passkey.name ?? text("passkey")
 							}), /* @__PURE__ */ jsxs("span", {
 								className: "block text-xs text-muted-foreground",
 								children: [
-									passkey.createdAt ? `Added ${formatDate(Date.parse(passkey.createdAt))}` : "Added earlier",
+									passkey.createdAt ? text("addedOn", formatDate(Date.parse(passkey.createdAt))) : text("addedEarlier"),
 									" · ",
-									passkey.backedUp ? "Synced across your devices" : "On one device"
+									passkey.backedUp ? text("synced") : text("oneDevice")
 								]
 							})]
 						}),
@@ -74,17 +75,17 @@ const PasskeysSection = ({ rule, passkeys, onAdd, onRename, onRemove }) => {
 										passkey
 									});
 								},
-								children: "Rename"
+								children: text("rename")
 							}), /* @__PURE__ */ jsx(Button, {
 								size: "sm",
 								variant: "ghost",
 								disabled: keepLast,
-								title: keepLast ? "Passkeys are required: add another one before removing this one." : void 0,
+								title: keepLast ? text("keepLastPasskey") : void 0,
 								onClick: () => setEditing({
 									kind: "remove",
 									passkey
 								}),
-								children: "Remove"
+								children: text("remove")
 							})]
 						})
 					]
@@ -93,25 +94,25 @@ const PasskeysSection = ({ rule, passkeys, onAdd, onRename, onRemove }) => {
 			rule !== "forbidden" && /* @__PURE__ */ jsxs(Button, {
 				loading: busy && !editing,
 				onClick: () => void attempt(onAdd),
-				children: [/* @__PURE__ */ jsx(Plus, { className: "size-3.5" }), "Add a passkey"]
+				children: [/* @__PURE__ */ jsx(Plus, { className: "size-3.5" }), text("addPasskey")]
 			}),
 			editing?.kind === "rename" && /* @__PURE__ */ jsxs(Dialog, {
-				title: "Rename passkey",
-				description: "A name that tells you where this passkey lives, such as the device or password manager.",
+				title: text("renamePasskey"),
+				description: text("renamePasskeyDescription"),
 				onClose: () => setEditing(void 0),
 				actions: /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Button, {
 					onClick: () => setEditing(void 0),
-					children: "Cancel"
+					children: text("cancel")
 				}), /* @__PURE__ */ jsx(Button, {
 					variant: "primary",
 					loading: busy,
 					disabled: !name.trim(),
 					onClick: () => void attempt(() => onRename(editing.passkey.id, name.trim())),
-					children: "Save"
+					children: text("save")
 				})] }),
 				children: [/* @__PURE__ */ jsxs("label", {
 					className: "flex flex-col gap-1.5 font-medium",
-					children: ["Name", /* @__PURE__ */ jsx(Input, {
+					children: [text("name"), /* @__PURE__ */ jsx(Input, {
 						autoFocus: true,
 						value: name,
 						maxLength: 60,
@@ -120,17 +121,17 @@ const PasskeysSection = ({ rule, passkeys, onAdd, onRename, onRemove }) => {
 				}), /* @__PURE__ */ jsx(SectionError, { message: error })]
 			}),
 			editing?.kind === "remove" && /* @__PURE__ */ jsx(Dialog, {
-				title: "Remove passkey?",
-				description: `${editing.passkey.name ?? "This passkey"} will no longer sign you in here. It stays on the device until you delete it there.`,
+				title: text("removePasskey"),
+				description: text("removePasskeyDescription", editing.passkey.name ?? text("thisPasskey")),
 				onClose: () => setEditing(void 0),
 				actions: /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Button, {
 					onClick: () => setEditing(void 0),
-					children: "Cancel"
+					children: text("cancel")
 				}), /* @__PURE__ */ jsx(Button, {
 					variant: "danger",
 					loading: busy,
 					onClick: () => void attempt(() => onRemove(editing.passkey.id)),
-					children: "Remove"
+					children: text("remove")
 				})] }),
 				children: error && /* @__PURE__ */ jsx(SectionError, { message: error })
 			})

package/dist/account/password-dialog.js

@@ -1,3 +1,4 @@
+import { text } from "./messages.js";
 import { Input } from "../primitives/input.js";
 import { authMessage } from "../auth/auth-messages.js";
 import { Button } from "../primitives/button.js";
@@ -28,7 +29,7 @@ const PasswordDialog = ({ title, description, confirmLabel, danger, needsPasswor
 		onClose,
 		actions: /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Button, {
 			onClick: onClose,
-			children: "Cancel"
+			children: text("cancel")
 		}), /* @__PURE__ */ jsx(Button, {
 			variant: danger ? "danger" : "primary",
 			loading: busy,
@@ -38,7 +39,7 @@ const PasswordDialog = ({ title, description, confirmLabel, danger, needsPasswor
 		})] }),
 		children: [needsPassword && /* @__PURE__ */ jsxs("label", {
 			className: "flex flex-col gap-1.5 font-medium",
-			children: ["Your password", /* @__PURE__ */ jsx(Input, {
+			children: [text("yourPassword"), /* @__PURE__ */ jsx(Input, {
 				type: "password",
 				autoComplete: "current-password",
 				autoFocus: true,
@@ -49,7 +50,7 @@ const PasswordDialog = ({ title, description, confirmLabel, danger, needsPasswor
 			})]
 		}), error && /* @__PURE__ */ jsx("p", {
 			role: "alert",
-			className: "mt-2 text-xs font-medium text-danger-text",
+			className: "mt-2 text-body font-medium text-danger-text",
 			children: error
 		})]
 	});

package/dist/account/sign-in-policy-form.js

@@ -1,3 +1,4 @@
+import { text } from "./messages.js";
 import { cn } from "../lib/cn.js";
 import { formatDateTime } from "../format/date.js";
 import { Button } from "../primitives/button.js";
@@ -14,22 +15,22 @@ const RuleChoice = ({ row, value, onChange }) => /* @__PURE__ */ jsx("span", {
 		role: "radio",
 		"aria-checked": option.value === value,
 		onClick: () => onChange(option.value),
-		className: cn("rounded px-3 text-xs font-medium transition-colors", option.value === value ? "bg-background text-foreground shadow-sm" : "text-muted-foreground hover:text-foreground"),
+		className: cn("rounded px-3 text-body font-medium transition-colors", option.value === value ? "bg-background text-foreground shadow-sm" : "text-muted-foreground hover:text-foreground"),
 		children: option.label
 	}, option.value))
 });
 const rowNote = ({ method }, draft, { mail, effective, policy }) => {
-	if (method === "emailCode" && !mail) return "Needs mail settings (PROTOBASE_SMTP_URL and PROTOBASE_MAIL_FROM): off until they are set.";
-	if (method === "password" && !mail && draft.password === "forbidden") return "Without mail settings, password sign-in stays on so nobody is locked out.";
-	if (method === "staffAccess" && !mail && draft.staffAccess === "notify") return "Needs mail settings (PROTOBASE_SMTP_URL and PROTOBASE_MAIL_FROM): staff cannot sign in until they are set.";
-	if (method === "platformSignIn" && draft.platformSignIn === "allowed" && (draft.passkey === "required" || draft.twoFactor === "required")) return "Off while passkeys or two-factor authentication are required: it skips the second step.";
-	if (draft[method] === policy[method] && effective[method] !== policy[method]) return `Applies as ${ruleLabel(method, effective[method])} for now.`;
+	if (method === "emailCode" && !mail) return text("codeNeedsMail");
+	if (method === "password" && !mail && draft.password === "forbidden") return text("passwordStaysOn");
+	if (method === "staffAccess" && !mail && draft.staffAccess === "notify") return text("staffNeedsMail");
+	if (method === "platformSignIn" && draft.platformSignIn === "allowed" && (draft.passkey === "required" || draft.twoFactor === "required")) return text("platformOff");
+	if (draft[method] === policy[method] && effective[method] !== policy[method]) return text("appliesAs", ruleLabel(method, effective[method]));
 };
-const rowsFor = ({ operator, platformSignIn }) => policyRows.flatMap((row) => {
+const rowsFor = ({ operator, platformSignIn }) => policyRows().flatMap((row) => {
 	if (row.method === "staffAccess" && !operator) return [];
 	if (row.method === "platformSignIn") return platformSignIn ? [{
 		...row,
-		label: `Sign in with ${platformSignIn} through the platform`
+		label: text("platformSignInWith", platformSignIn)
 	}] : [];
 	return [row];
 });
@@ -84,30 +85,30 @@ const SignInPolicyForm = ({ state, onSave, busy, error, notice }) => {
 			}),
 			error && /* @__PURE__ */ jsx("p", {
 				role: "alert",
-				className: "rounded-md bg-danger-soft px-3 py-2 text-xs font-medium text-danger-text",
+				className: "rounded-md bg-danger-soft px-3 py-2 text-body font-medium text-danger-text",
 				children: error
 			}),
 			notice && !changed && /* @__PURE__ */ jsx("p", {
 				role: "status",
-				className: "rounded-md bg-success-soft px-3 py-2 text-xs font-medium text-success-text",
+				className: "rounded-md bg-success-soft px-3 py-2 text-body font-medium text-success-text",
 				children: notice
 			}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "flex flex-wrap items-center justify-between gap-3",
 				children: [/* @__PURE__ */ jsx("p", {
 					className: "text-xs text-muted-foreground",
-					children: state.savedAt ? `Last saved${state.savedBy ? ` by ${state.savedBy}` : ""} on ${formatDateTime(Date.parse(state.savedAt))}.` : "Never changed: everything is on, nothing is required."
+					children: state.savedAt ? state.savedBy ? text("lastSavedBy", state.savedBy, formatDateTime(Date.parse(state.savedAt))) : text("lastSaved", formatDateTime(Date.parse(state.savedAt))) : text("neverChanged")
 				}), /* @__PURE__ */ jsxs("div", {
 					className: "flex gap-2",
 					children: [changed && /* @__PURE__ */ jsx(Button, {
 						onClick: () => setDraft(state.policy),
-						children: "Reset"
+						children: text("reset")
 					}), /* @__PURE__ */ jsx(Button, {
 						variant: "primary",
 						type: "submit",
 						loading: busy,
 						disabled: !changed,
-						children: "Save"
+						children: text("save")
 					})]
 				})]
 			})