pgkiln 0.80.0 → 0.81.0

package/src/builder/i18n/en.ts

@@ -1962,4 +1962,433 @@ export const en = {
   'us.mfa_reset_help': 'Removes the authenticator apps and recovery codes of {user} and signs them out everywhere. Where an application requires two-factor sign-in, they add a new app at their next sign-in. Logged.',
   'us.mfa_reset_done': 'Two-factor sign-in of {user} was reset.',
   'us.mfa_reason_needed': 'Give a reason for the reset.',
+  // ------------------------------------------------------------ Mail queue (sprint 152)
+  'mq.title': 'Mail queue',
+  'mq.refused': 'Only administrators and workspace administrators see the mail queue.',
+  'mq.period.24': 'Last 24 hours',
+  'mq.period.48': 'Last 48 hours',
+  'mq.period.168': 'Last 7 days',
+  'mq.period': 'Period',
+  'mq.workspace': 'Workspace',
+  'mq.all_workspaces': 'All workspaces',
+  'mq.app': 'Application',
+  'mq.all_apps': 'All applications',
+  'mq.intro_ws': 'Delivery of the mail of workspace {workspace}: what was queued, sent and failed, which mail is being retried, how long the providers took, and the failures with the provider\'s answer. Mail is kept 30 days.',
+  'mq.intro_all': 'Delivery of the mail of every workspace: what was queued, sent and failed, which mail is being retried, how long the providers took, and the failures with the provider\'s answer. Mail is kept 30 days.',
+  'mq.only_yours': 'You see your workspace\'s applications only.',
+  'mq.stat.queued': 'queued now',
+  'mq.stat.retrying': 'retrying now',
+  'mq.stat.sending': 'being sent',
+  'mq.stat.sent': 'sent',
+  'mq.stat.failed': 'failed',
+  'mq.stat.delivered': 'delivered',
+  'mq.stat.avg': 'average provider call',
+  'mq.per_hour': 'Per hour',
+  'mq.col.hour': 'Hour (UTC)',
+  'mq.col.hour_short': 'Hour',
+  'mq.col.queued': 'Queued',
+  'mq.col.sent': 'Sent',
+  'mq.col.failed': 'Failed',
+  'mq.col.retrying': 'Retrying',
+  'mq.none_period': 'No mail in this period.',
+  'mq.slowest': 'Slowest provider calls',
+  'mq.col.when': 'When (UTC)',
+  'mq.col.when_short': 'When',
+  'mq.col.service': 'Service',
+  'mq.col.status': 'Status',
+  'mq.col.time': 'Time',
+  'mq.status.sent': 'sent',
+  'mq.status.error': 'error',
+  'mq.status.retrying': 'retrying',
+  'mq.status.sending': 'sending',
+  'mq.status.cancelled': 'cancelled',
+  'mq.none_calls': 'No provider calls in this period.',
+  'mq.per_app': 'Per workspace and application',
+  'mq.col.average': 'Average',
+  'mq.col.slowest': 'Slowest',
+  'mq.failures': 'Failures',
+  'mq.failures_intro': 'Mail that will not be tried again: the provider refused it, or it failed {n} times. {retry} queues it again with fresh attempts; {purge} deletes it.',
+  'mq.col.failed_at': 'Failed (UTC)',
+  'mq.col.to': 'To',
+  'mq.col.subject': 'Subject',
+  'mq.col.answer': 'Provider\'s answer',
+  'mq.col.actions': 'Actions',
+  'mq.queued_at': 'queued {when}',
+  'mq.attempts_one': '{n} attempt',
+  'mq.attempts': '{n} attempts',
+  'mq.retry': 'Retry',
+  'mq.purge': 'Purge',
+  'mq.purge_confirm': 'Delete this mail?',
+  'mq.none_failed': 'No failed mail.',
+  'mq.retry_all': 'Retry all failed',
+  'mq.purge_all': 'Purge all failed',
+  'mq.purge_all_confirm': 'Delete every failed mail shown here?',
+  'mq.requeued': 'The mail is queued again.',
+  'mq.changed': 'The mail has changed meanwhile.',
+  'mq.deleted': 'The mail is deleted.',
+  'mq.only_done': 'Only sent, failed or cancelled mail can be purged.',
+  'mq.n_requeued_one': '{n} mail queued again.',
+  'mq.n_requeued': '{n} mails queued again.',
+  'mq.n_deleted_one': '{n} mail deleted.',
+  'mq.n_deleted': '{n} mails deleted.',
+  // ------------------------------------------------------------ Network access (sprint 152)
+  'na.title': 'Network access',
+  'na.refused': 'Only administrators and workspace administrators manage network access.',
+  'na.none': 'None.',
+  'na.url_invalid': 'The URL is not valid.',
+  'na.url_ok': '{host} may be called by this workspace\'s applications (the address it resolves to is checked when the call is made).',
+  'na.intro': 'Which web services the applications may call: {web_request}, REST data sources, the Invoke API process and workflow step, web credential token endpoints, object storage and REST source catalogs. The installation\'s list applies to every workspace; a workspace\'s own list can only narrow it, never widen it. Private and loopback addresses stay refused unless the installation allows them, whatever a workspace lists.',
+  'na.workspace': 'Workspace {name}',
+  'na.outgoing': 'Outgoing calls of this workspace\'s applications',
+  'na.any_host': 'Any host the installation allows',
+  'na.only_hosts': 'Only the hosts below (and the installation must allow them too)',
+  'na.hosts': 'Hosts',
+  'na.hosts_help': 'One per line: {a}, {b} for its subdomains, {c} for one port only. No scheme or path. Restricted with no hosts: no outgoing calls at all.',
+  'na.unreachable': 'Not on the installation\'s list, so never reachable: {hosts}.',
+  'na.servers_on_hosts': 'Remote servers on these hosts: {list}.',
+  'na.save': 'Save',
+  'na.installation': 'Installation',
+  'na.installation_note': 'Set in the server\'s environment by its administrators ({env}).',
+  'na.any_public': 'Any public host ({star}).',
+  'na.private': 'Private hosts',
+  'na.private_note': 'Hosts on private or loopback addresses that may be called ({env}).',
+  'na.servers': 'Remote servers',
+  'na.servers_intro': 'The hosts this workspace\'s {link} stand for now: the REST data sources, catalogs and AI services on a server call this host.',
+  'na.servers_link': 'remote servers',
+  'na.col.server': 'Server',
+  'na.col.host': 'Host',
+  'na.col.from': 'From',
+  'na.col.called': 'Would be called',
+  'na.host_none': 'none',
+  'na.base_url': 'base URL',
+  'na.no': 'no',
+  'na.yes': 'yes',
+  'na.no_servers': 'No remote servers.',
+  'na.check': 'Check a URL',
+  'na.url': 'URL',
+  'na.check_btn': 'Check',
+  'na.check_note': 'Nothing is called: this applies the lists to the URL as they are now.',
+  'na.workspaces': 'Workspaces',
+  'na.col.workspace': 'Workspace',
+  'na.col.outgoing': 'Outgoing calls',
+  'na.n_hosts_one': '{n} host',
+  'na.n_hosts': '{n} hosts',
+  'na.inst_list': 'the installation\'s list',
+  'na.ws_list': 'the workspace\'s list',
+  'na.refusals': 'Refused calls',
+  'na.refusals_intro': 'The last 100 calls of this workspace that a list refused (kept 7 days). The application\'s debug log has them too.',
+  'na.col.when': 'When (UTC)',
+  'na.col.when_short': 'When',
+  'na.col.app': 'Application',
+  'na.col.call': 'Call',
+  'na.col.refused_by': 'Refused by',
+  'na.no_refusals': 'No refused calls.',
+  'na.saved_only': 'Saved: this workspace\'s applications call only these hosts.',
+  'na.saved_none': 'Saved: this workspace\'s applications call no hosts at all.',
+  'na.saved_inst': 'Saved: the installation\'s list applies.',
+  // ------------------------------------------------------------ Workspace utilities and dashboard (sprint 152)
+  'wu.title': 'Workspace utilities',
+  'wu.users': 'Users',
+  'wu.users_text': 'Accounts of the people who use the applications, and their access.',
+  'wu.app_groups': 'Application groups',
+  'wu.app_groups_text': 'Organise the applications of this workspace into groups.',
+  'wu.gallery': 'App Gallery',
+  'wu.gallery_text': 'Sample and starter applications to install, and this workspace\'s boilerplates.',
+  'wu.providers': 'Identity providers',
+  'wu.providers_text': 'OpenID Connect and SAML sign-in.',
+  'wu.ldap': 'LDAP directories',
+  'wu.ldap_text': 'Sign in with directory accounts.',
+  'wu.password_policy': 'Password policy',
+  'wu.password_policy_text': 'Length, complexity and lifetime of passwords.',
+  'wu.developers': 'Developers',
+  'wu.developers_text': 'Who may use this builder.',
+  'wu.sql': 'SQL Workshop',
+  'wu.sql_text': 'Run SQL, browse objects and load data.',
+  'wu.backups': 'Manage backups',
+  'wu.backups_text': 'The backups of every application of this workspace; back them all up at once.',
+  'wu.files': 'Static workspace files',
+  'wu.files_text': 'CSS, JavaScript, images and fonts every application of this workspace can load ({tag}).',
+  'wu.servers': 'Remote servers',
+  'wu.servers_text': 'Named base URLs for REST data sources, catalogs and AI services: change one value to move them all.',
+  'wu.remote_dbs': 'Remote databases',
+  'wu.remote_dbs_text': 'Another PostgreSQL database\'s tables as foreign tables (postgres_fdw) the applications query like their own (administrators).',
+  'wu.credentials': 'Web credentials',
+  'wu.credentials_text': 'Keys and OAuth2 clients the applications of this workspace use by name (secrets encrypted, write-only).',
+  'wu.catalogs': 'REST Source Catalogs',
+  'wu.catalogs_text': 'Web services described once for the workspace (e.g. from an OpenAPI document); applications make REST data sources from them.',
+  'wu.export': 'Export and import',
+  'wu.export_text': 'This workspace\'s components as one file: settings, developers, groups, links, catalogs, scripts, blueprints (workspace administrators).',
+  'wu.dashboard': 'Dashboard',
+  'wu.dashboard_text': 'Usage and problems across the workspace.',
+  'wu.instance': 'Instance settings',
+  'wu.instance_text': 'Session length, sign-in throttling and the server\'s configuration (administrators).',
+  'wu.workspaces': 'Workspaces',
+  'wu.workspaces_text': 'Groups of applications and their developers (administrators).',
+  'wu.workspace': 'Workspace {name}',
+  'wu.workspace_text': 'Its name, developers, preferences and extension links (workspace administrators).',
+  'wu.ui_defaults': 'UI defaults',
+  'wu.ui_defaults_text': 'Labels, format masks, help and lists of values per table column, used by the page wizards.',
+  'wu.icons': 'Icons',
+  'wu.icons_text': 'Browse the icons of the icon picker.',
+  'wu.vectors': 'Vector providers',
+  'wu.vectors_text': 'Embeddings for search by meaning: the applications\' vector providers, their vector columns, and whether pgvector is installed.',
+  'wu.ai': 'AI services',
+  'wu.ai_text': 'Claude, OpenAI, Gemini and OpenAI-compatible services for the applications: models, keys, limits and usage (administrators).',
+  'wu.mail': 'Mail services',
+  'wu.mail_text': 'SMTP, Microsoft 365, Amazon SES, Resend, Postmark, SendGrid or Mailgun for the applications\' e-mail (administrators).',
+  'wu.otel': 'OpenTelemetry',
+  'wu.otel_text': 'Traces, logs and metrics to your own monitoring through an OpenTelemetry Collector; /metrics for Prometheus (administrators).',
+  'wu.installation': 'Installation',
+  'wu.installation_text': 'Version, install and upgrade runs, applied migrations (administrators).',
+  'wu.about': 'About',
+  'wu.about_text': 'Workspace utilities hold what the applications of this workspace share: users and sign-in, groups, the gallery, and reports across the applications.',
+  'wu.learn_more': 'Learn more …',
+  'wu.cross_app': 'Cross Application Reports',
+  'wu.side': 'About and reports',
+  'wd.title': 'Workspace dashboard',
+  'wd.crumb': 'Dashboard',
+  'wd.apps': 'applications',
+  'wd.pages': 'pages',
+  'wd.accounts': 'active accounts',
+  'wd.views': 'page views (24h)',
+  'wd.users': 'distinct users (24h)',
+  'wd.failures': 'failed / locked sign-ins (24h)',
+  'wd.problems': 'errors / access denied (24h)',
+  'wd.per_app': 'Applications (7 days)',
+  'wd.col.app': 'Application',
+  'wd.col.views_day': 'Views (24h)',
+  'wd.col.views_week': 'Views (7 days)',
+  'wd.col.users': 'Users',
+  'wd.col.avg': 'Avg ms',
+  'wd.col.problems': 'Errors / denied',
+  'wd.activity': 'Activity',
+  // ------------------------------------------------------------ Instance settings (sprint 152)
+  'ins.title': 'Instance settings',
+  'ins.refused': 'Only administrators change instance settings.',
+  'ins.intro': 'Settings for every application and the builder of this installation. A value set here wins over the environment variable; empty uses the environment variable or the default. Other servers of this installation pick up a change within 30 seconds.',
+  'ins.sessions': 'Sessions and sign-in',
+  'ins.in_effect': 'In effect: {value} ({origin}; {env}, default {default}).',
+  'ins.origin.builder': 'set here',
+  'ins.origin.environment': 'environment variable',
+  'ins.origin.default': 'default',
+  'ins.save': 'Save',
+  'ins.checks': 'Lockout checks',
+  'ins.attention_one': '{n} of these needs attention.',
+  'ins.attention': '{n} of these need attention.',
+  'ins.nothing': 'Nothing needs attention.',
+  'ins.checks_cli': 'The same checks run on the server with {cmd}; {url} shows which passkeys a new address would break.',
+  'ins.level.ok': 'OK',
+  'ins.level.info': 'Note',
+  'ins.level.warning': 'Warning',
+  'ins.level.error': 'Error',
+  'ins.have_copy': 'I have a copy of this key',
+  'ins.configuration': 'Configuration',
+  'ins.config_intro': 'Environment variables of this server (chapter 1 of the guide). Secrets show only whether they are set.',
+  'ins.col.variable': 'Variable',
+  'ins.col.value': 'Value',
+  'ins.col.purpose': 'Purpose',
+  'ins.backup_ok': 'Backup of the instance key confirmed.',
+  'ins.no_key': 'PGKILN_SECRET_KEY is not set.',
+  'ins.saved': 'Instance settings saved.',
+  // ------------------------------------------------------------ LDAP directories (sprint 152)
+  'ldap.title': 'LDAP directories',
+  'ldap.server': 'Server',
+  'ldap.name': 'Name',
+  'ldap.name_help': 'lowercase, e.g. corp or ad',
+  'ldap.display_name': 'Display name',
+  'ldap.url': 'URL',
+  'ldap.url_help': 'ldaps:// (TLS) or ldap://, with StartTLS below. Plain ldap:// sends passwords unencrypted.',
+  'ldap.bind_dn': 'Service account DN',
+  'ldap.bind_dn_help': 'Searches users (and groups). Empty: an anonymous search.',
+  'ldap.bind_password': 'Service account password',
+  'ldap.password_stored': 'A password is stored. Leave empty to keep it.',
+  'ldap.start_tls': 'StartTLS (for ldap:// URLs)',
+  'ldap.tls_verify': 'Verify the server certificate',
+  'ldap.tls_verify_help': 'Turn off only for test servers with self-signed certificates.',
+  'ldap.remove_password': 'Remove the stored password (anonymous search)',
+  'ldap.users': 'Users',
+  'ldap.user_base': 'User search base',
+  'ldap.user_filter': 'User filter',
+  'ldap.user_filter_help': '{username} is replaced by the escaped username. Active Directory: {ad}',
+  'ldap.username_attr': 'Username attribute',
+  'ldap.username_attr_help': 'The pgkiln username; AD: sAMAccountName',
+  'ldap.display_attr': 'Display name attribute',
+  'ldap.email_attr': 'E-mail attribute',
+  'ldap.auto_create': 'Create accounts automatically on first sign-in',
+  'ldap.auto_create_help': 'Otherwise only people with an existing account (same username) can sign in.',
+  'ldap.groups': 'Groups (mapped to roles under each app\'s Access control)',
+  'ldap.group_attr': 'Group attribute of the user',
+  'ldap.group_attr_help': 'Group DNs; the first value of each is the group name. Empty: not used.',
+  'ldap.group_base': 'Group search base',
+  'ldap.group_base_help': 'Optional: search groups as well.',
+  'ldap.group_filter': 'Group filter',
+  'ldap.group_filter_help': '{dn}: the user\'s DN, {username}: the username (both escaped).',
+  'ldap.group_name_attr': 'Group name attribute',
+  'ldap.enabled': 'Enabled',
+  'ldap.add': 'Add directory',
+  'ldap.save': 'Save',
+  'ldap.intro': 'OpenLDAP, Active Directory and other LDAP servers. An application\'s sign-in form checks local passwords first, then the directories enabled under {where}. Directory groups map to roles under each application\'s {access}.',
+  'ldap.where': 'Settings → Sign-in methods',
+  'ldap.access': 'Access control',
+  'ldap.directories': 'Directories',
+  'ldap.col.directory': 'Directory',
+  'ldap.col.used_by': 'Used by',
+  'ldap.col.linked': 'Linked accounts',
+  'ldap.col.status': 'Status',
+  'ldap.no_apps': 'no apps',
+  'ldap.status_enabled': 'enabled',
+  'ldap.status_disabled': 'disabled',
+  'ldap.status_auto': 'auto-create',
+  'ldap.none': 'No LDAP directories yet.',
+  'ldap.settings': 'Settings',
+  'ldap.delete_confirm': 'Delete {name}? Links to accounts are removed; accounts stay.',
+  'ldap.delete': 'Delete directory',
+  'ldap.test': 'Test connection',
+  'ldap.test_intro': 'Connects, binds as the service account (or anonymously) and checks the search base; with a username, looks the user up with the filter. No password is checked.',
+  'ldap.test_username': 'Username (optional)',
+  'ldap.test_username_label': 'Username to look up',
+  'ldap.test_btn': 'Test',
+  'ldap.added': 'Directory added. Test the connection, then enable it for an application.',
+  'ldap.saved': 'Directory saved.',
+  'ldap.test_failed': 'The test failed: {error}',
+  'ldap.deleted': 'Directory deleted.',
+  // ------------------------------------------------------------ Database users (sprint 153)
+  'dbu.title': 'Database Users',
+  'dbu.priv.none': 'None',
+  'dbu.priv.read': 'Read (SELECT)',
+  'dbu.priv.write': 'Read and write',
+  'dbu.existing.none': 'No change',
+  'dbu.existing.read': 'Grant read',
+  'dbu.existing.write': 'Grant read and write',
+  'dbu.existing.revoke': 'Revoke all',
+  'dbu.pw.none': 'No password',
+  'dbu.pw.set': 'Set a password',
+  'dbu.pw.keep': 'Keep the password',
+  'dbu.pw.new': 'Set a new password',
+  'dbu.pw.remove': 'Remove the password',
+  'dbu.role': 'Role',
+  'dbu.name': 'Name',
+  'dbu.name_help': 'Letters, digits, _ and $; names starting with pg_ or pgkiln are reserved.',
+  'dbu.sign_in': 'Sign in',
+  'dbu.can_login': 'Can sign in (LOGIN)',
+  'dbu.can_login_help': 'A role without it is a group role: others get its privileges by being members.',
+  'dbu.password': 'Password',
+  'dbu.password_help': 'You type the password on the next step, after reviewing the SQL. It is stored as a SCRAM-SHA-256 verifier and never shown.',
+  'dbu.valid_until': 'Valid until',
+  'dbu.valid_until_help': 'The password stops working after this date (VALID UNTIL). Empty: it doesn\'t expire.',
+  'dbu.conn_limit': 'Connection limit',
+  'dbu.conn_limit_help': 'Empty: no limit.',
+  'dbu.search_path': 'Default schema (search path)',
+  'dbu.search_path_help': 'Schemas, comma separated, for this role\'s sessions in this database. Empty: the server\'s default.',
+  'dbu.comment': 'Comment',
+  'dbu.member_of': 'Member of',
+  'dbu.member_of_intro': 'The role gets the privileges of the roles it is a member of. pgkiln\'s own roles, superusers, login roles and the predefined roles that reach the server\'s files can\'t be granted here.',
+  'dbu.no_groups': 'There are no group roles to grant.',
+  'dbu.schemas': 'Schemas',
+  'dbu.schemas_intro': '{usage} lets the role use a schema\'s objects (as far as their own privileges allow), {create} make objects in it. {future} are default privileges on the tables (and, for writing, sequences) pgkiln\'s owner connection creates there from now on; {existing} grants or revokes once on the tables there now. pgkiln\'s own schemas aren\'t listed.',
+  'dbu.col.schema': 'Schema',
+  'dbu.col.usage': 'Usage',
+  'dbu.col.create': 'Create',
+  'dbu.col.future': 'Future tables',
+  'dbu.col.existing': 'Existing tables',
+  'dbu.usage_on': 'Usage on {schema}',
+  'dbu.create_in': 'Create in {schema}',
+  'dbu.future_in': 'Future tables in {schema}',
+  'dbu.existing_in': 'Existing tables in {schema}',
+  'dbu.custom': 'As they are (custom)',
+  'dbu.no_schemas': 'No schemas.',
+  'dbu.review': 'Review SQL',
+  'dbu.cancel': 'Cancel',
+  'dbu.sql': 'SQL',
+  'dbu.sql_intro': 'These statements run in one transaction when you apply them: all of them, or none.',
+  'dbu.sql_masked': 'The password shows as \'********\': pgkiln sends PostgreSQL only its SCRAM-SHA-256 verifier.',
+  'dbu.generated_sql': 'Generated SQL',
+  'dbu.nothing_sql': 'Nothing to change: the role is as the form says.',
+  'dbu.confirm_password': 'Confirm password',
+  'dbu.password_note': 'At least 8 characters. It is hashed by pgkiln before it reaches the database, and it is not kept.',
+  'dbu.apply': 'Apply',
+  'dbu.back_form': 'Back to the form',
+  'dbu.tag.in_use': 'in use',
+  'dbu.tag.superuser': 'superuser',
+  'dbu.tag.bypassrls': 'bypass RLS',
+  'dbu.tag.createrole': 'create role',
+  'dbu.tag.createdb': 'create DB',
+  'dbu.tag.replication': 'replication',
+  'dbu.never': 'never',
+  'dbu.expired': 'expired',
+  'dbu.in_days_one': 'in {n} day',
+  'dbu.in_days': 'in {n} days',
+  'dbu.f.all': 'All roles',
+  'dbu.f.login': 'Can sign in',
+  'dbu.f.expiring': 'Password expires within 30 days',
+  'dbu.f.bypassrls': 'Bypass row level security',
+  'dbu.f.owners': 'No sign-in, but own objects',
+  'dbu.f.pgkiln': 'pgkiln\'s own',
+  'dbu.list_intro': 'The PostgreSQL roles of this server (pg_roles), without the predefined pg_ roles.',
+  'dbu.create_user': 'Create database user',
+  'dbu.filters': 'Filters',
+  'dbu.search_roles': 'Search roles',
+  'dbu.search': 'Search',
+  'dbu.col.attributes': 'Attributes',
+  'dbu.col.connections': 'Connections',
+  'dbu.col.owns': 'Owns',
+  'dbu.yes': 'Yes',
+  'dbu.no': 'No',
+  'dbu.no_limit': 'no limit',
+  'dbu.owns_schemas': 'schemas {list}',
+  'dbu.n_objects_one': '{n} object',
+  'dbu.n_objects': '{n} objects',
+  'dbu.nothing': 'nothing',
+  'dbu.elsewhere': '(+{n} elsewhere)',
+  'dbu.no_roles': 'No roles.',
+  'dbu.list_note': 'PostgreSQL doesn\'t record when a role was created. {pgkiln} roles are pgkiln\'s own connections and roles: they are shown, not changed here. Roles {in_use} by an application or an isolated workspace can be changed but not dropped.',
+  'dbu.details': 'Details',
+  'dbu.no_login': 'No sign-in (a group role)',
+  'dbu.members': 'Members',
+  'dbu.used_by': 'Used by',
+  'dbu.none': 'none',
+  'dbu.owned_first': '{n} objects, the first {first}:',
+  'dbu.nothing_here': 'nothing in this database',
+  'dbu.owned_other': '{n} in other databases or shared',
+  'dbu.protected': '{name} is one of pgkiln\'s own roles (its owner or runtime connection, a pgkiln_ role or the bootstrap superuser): pgkiln needs it as it is, so it isn\'t changed or dropped here.',
+  'dbu.role_title': 'Role {name}',
+  'dbu.drop_role_link': 'Drop role…',
+  'dbu.used_change_only_one': '{users} uses this role: it can be changed, not dropped.',
+  'dbu.used_change_only': '{users} use this role: it can be changed, not dropped.',
+  'dbu.create_title': 'Create database user {name}',
+  'dbu.change_title': 'Change role {name}',
+  'dbu.crumb.create': 'Create',
+  'dbu.crumb.review': 'Review',
+  'dbu.crumb.drop': 'Drop',
+  'dbu.exists': 'A role named {name} exists already.',
+  'dbu.changed_since': 'The statements changed since you reviewed them (the role or the form changed): review them again.',
+  'dbu.nothing_change': 'Nothing to change.',
+  'dbu.rolled_back': '{nothing}: the statements ran in one transaction, which was rolled back.',
+  'dbu.nothing_changed': 'Nothing was changed',
+  'dbu.created_one': 'Created the role {name}: {n} statement.',
+  'dbu.created': 'Created the role {name}: {n} statements.',
+  'dbu.changed_one': 'Changed the role {name}: {n} statement.',
+  'dbu.changed': 'Changed the role {name}: {n} statements.',
+  'dbu.drop_title': 'Drop role {name}',
+  'dbu.drop_refused_one': '{users} uses {name}: it isn\'t dropped while it does.',
+  'dbu.drop_refused': '{users} use {name}: it isn\'t dropped while they do.',
+  'dbu.owns_here_one': '{name} owns {n} object in this database',
+  'dbu.owns_here': '{name} owns {n} objects in this database',
+  'dbu.owns_elsewhere': 'and {n} in other databases or shared (databases, tablespaces)',
+  'dbu.reassign_note': 'Reassign them to another role, or drop them with the role.',
+  'dbu.elsewhere_note': 'Objects in other databases must be reassigned or dropped there first, or DROP ROLE fails.',
+  'dbu.owned_objects': 'Owned objects',
+  'dbu.objects_it_owns': 'Objects it owns',
+  'dbu.reassign_to': 'Reassign to {name}',
+  'dbu.drop_owned': 'Drop them with the role (DROP OWNED)',
+  'dbu.owns_nothing': 'It owns nothing here: just revoke its privileges',
+  'dbu.drop_owned_help': 'DROP OWNED also revokes the privileges granted to the role in this database.',
+  'dbu.drop_objects_one': 'Drop the {n} object {name} owns, with its data',
+  'dbu.drop_objects': 'Drop the {n} objects {name} owns, with their data',
+  'dbu.drop_confirm': 'Drop the role {name}?',
+  'dbu.drop_btn': 'Drop role',
+  'dbu.choose_target': 'Choose a role to reassign the objects to.',
+  'dbu.changed_since_drop': 'The statements changed since you reviewed them: review them again.',
+  'dbu.tick_box': 'Tick the box to drop the objects {name} owns, or reassign them.',
+  'dbu.dropped': 'Dropped the role {name}.',
 } as const;