{
  "userCount": "{{count}} users",
  "users": "Users",
  "packages": "Packages",
  "suspended": "Suspended",
  "securityCenter": "Security center",
  "singleAdminNo2fa": "This host has a single admin and 2FA is off. Enable admin 2FA under Security, then add a backup admin on this page.",
  "enableAdmin2fa": "Enable admin 2FA",
  "addBackupAdmin": "Add a backup admin",
  "loading": "Loading users & packages…",
  "userList": "Users ({{count}})",
  "userListDesc": "Open detail to edit role, password, package, overrides",
  "createUser": "Create user",
  "operatorHighRiskHint": "The factory operator role includes high-risk writes (services, firewall, package apply, MySQL, Nginx publish). Narrow it only if you intend to change every existing operator.",
  "createUserPlus": "+ Create user",
  "searchPh": "Username / role / package",
  "searchPkgPh": "Package name",
  "searchUsersAria": "Search users",
  "user": "User",
  "roles": "Roles",
  "package": "Package",
  "packageAria": "{{name}} package",
  "noneOption": "— none —",
  "resume": "Resume",
  "suspend": "Suspend",
  "impersonate": "Impersonate",
  "impersonateHint": "Opens a session as this user. Use the account menu to leave impersonation.",
  "cannotDeleteSelf": "You cannot delete your own account here",
  "cannotImpersonateSelf": "You are already signed in as this account",
  "openDetail": "Details",
  "edit": "Edit",
  "resetPassword": "Reset password",
  "newPassword": "New password",
  "saveUser": "Save user",
  "userSaved": "Updated {{name}}",
  "filterAll": "All",
  "filterAdmin": "Admin",
  "filterOperator": "Operator",
  "filterViewer": "Viewer",
  "filterSuspended": "Suspended",
  "filterNoPkg": "No package",
  "filter2faOff": "2FA off",
  "filterOverrides": "Has overrides",
  "subscribers": "Subscribers",
  "subscribersN": "{{count}} users",
  "ftp": "FTP",
  "ssh": "SSH",
  "databases": "Databases",
  "bandwidth": "Bandwidth MiB",
  "notes": "Notes",
  "editPkg": "Edit package",
  "pkgUpdated": "Updated package {{name}}",
  "pkgList": "Packages ({{count}})",
  "pkgListDesc": "Edit quotas; delete blocked while subscribers remain",
  "createPkg": "Create package",
  "createPkgPlus": "+ Create package",
  "mailboxes": "Mailboxes",
  "diskMiB": "Disk MiB",
  "noPackages": "No packages yet",
  "noPackagesHint": "Create a plan from the toolbar, then bind it to users.",
  "createUserDesc": "Password min 8 chars; edit role and permissions in detail later",
  "username": "Username",
  "passwordHint": "At least 8 characters",
  "role": "Role",
  "roleAria": "User role",
  "createPkgDesc": "Quota template; bind to users later",
  "maxProjects": "Max projects",
  "diskQuota": "Disk MiB",
  "custom": "Custom",
  "createdUser": "Created user {{name}}",
  "createdPkg": "Created package {{name}}",
  "impersonateTitle": "Impersonate {{name}}?",
  "deleteUserTitle": "Delete {{name}}?",
  "deletePkgTitle": "Delete package {{name}}?",
  "impersonateDesc": "Your current session will be replaced (~2 hours).",
  "deleteUserDesc": "This cannot be undone.",
  "deletePkgDesc": "Delete is refused while users still use this package.",
  "lastSeen": "Last seen",
  "neverSeen": "Never",
  "hostUsage": "Host usage",
  "hostUsageHint": "Machine-wide (host) totals, not hard per-user isolation",
  "hostTotalsBadge": "host totals",
  "opsChecklist": "Ops checklist",
  "opsCheck1": "Give Admin only to people who need privilege; use Operator day-to-day.",
  "opsCheck2": "Save after editing Permissions; one-click restore returns factory defaults.",
  "opsCheck3": "Do not delete packages with subscribers; unassign first.",
  "opsCheck4": "Backup restore is destructive—Admin by default; confirm before granting to Operator.",
  "detailDesc": "Account, access preview, and advanced overrides",
  "tabAccount": "Account",
  "tabAccess": "Access",
  "tabAdvanced": "Advanced",
  "rolePickHint": "Pick the right job role; Admin stays fully open",
  "accountSection": "Account settings",
  "packageHint": "Hosting package template (optional)",
  "resetPasswordOptional": "Leave blank to keep password",
  "accountStatus": "Account status",
  "suspendedHint": "Suspended: cannot sign in",
  "activeHint": "Active: can sign in and work",
  "accessHint": "Effective capabilities from role policy (readable labels)",
  "noCapsInBand": "No capabilities in this level",
  "overridesHint": "Affects this user only; role defaults stay unchanged",
  "adminNoOverrides": "Admin users are always fully open; personal revokes are not applied.",
  "grantsHint": "Extra capabilities beyond the role pack",
  "revokesHint": "Turn off inherited capabilities (not for Admin)",
  "searchCaps": "Search capabilities…",
  "noCapMatch": "No matching capability",
  "no2fa": "2FA off",
  "lastSeenValue": "Last active {{time}}",
  "roleName": {
    "admin": "Admin",
    "operator": "Operator",
    "viewer": "Viewer",
    "agent": "Agent"
  },
  "roleDesc": {
    "admin": "Full control: users, permissions, destructive ops. Always full-open.",
    "operator": "Day-to-day ops: services, updates, DNS/SSL, sites.",
    "viewer": "Read-only: status, logs, lists — no changes.",
    "agent": "Automation agent: low-risk writes with scope limits."
  },
  "securityTitle": "Two-factor auth (this user)",
  "securityPerUserHint": "TOTP/Passkey is per user",
  "securityStatusOn": "2FA enabled",
  "securityStatusOff": "2FA not set",
  "securitySessions": "Active sessions",
  "securityClearTotp": "Force-clear this user's 2FA",
  "securityClearTotpHint": "Requires step-up",
  "securityClearConfirm": "Type the username to confirm clearing 2FA",
  "securityClearOk": "Cleared 2FA for {{name}}",
  "securitySelfNote": "To set up your own 2FA, open Security → My security.",
  "cannotDeleteSelf": "You cannot delete the signed-in account",
  "cannotModifySelf": "You cannot suspend or demote the signed-in account",
  "cannotDeleteLastAdmin": "Cannot delete the last admin",
  "cannotDemoteLastAdmin": "Cannot suspend or demote the last admin",
  "lockSelfHint": "This is the signed-in account. Delete, suspend, and role change are blocked to prevent lock-out.",
  "lockLastAdminHint": "This is the last admin. Delete, suspend, and demotion are blocked.",
  "demoteAdminTitle": "Demote this admin?",
  "demoteAdminDesc": "This user will lose full admin access. Confirm only if another admin remains.",
  "quotaNonNeg": "Counts and quotas cannot be negative.",
  "diskQuotaHint": "Presets are GiB; custom box is MiB.",
  "bandwidthHint": "0 means unlimited."
}