<?php

// Multi-user account management (Settings → Users). Accounts now carry roles
// (admin > operator > viewer). One group per feature (R16); shared buttons live in common.php.
return [
    // Panel header
    'title' => 'Accounts',
    'subtitle' => 'Accounts with roles: admin, operator, viewer',
    'create' => 'Add account',

    // List
    'you' => 'you',
    'none' => 'No accounts',

    // Create modal
    'create_title' => 'Add account',
    'create_subtitle' => 'Pick a role. Set a password — or leave it blank to generate an initial password shown once.',
    'name_label' => 'Name',
    'name_placeholder' => 'Jane Doe',
    'email_label' => 'Email',
    'email_placeholder' => 'jane@example.com',
    'password_label' => 'Password',
    'password_placeholder' => 'Blank = generate a initial password',
    'password_hint' => 'Optional. Min. 6 characters. Leave blank to generate a secure initial password.',
    'created_notify' => 'Account :name created.',
    'create_submit' => 'Create account',

    // Role (badge, selector, hint)
    'role_label' => 'Role',
    'role_hint' => 'Admins control the whole panel; operators run operations; viewers only look.',

    // Role change (R5 confirm)
    'role_change_confirm' => 'Change role',
    'role_change_confirm_heading' => 'Change role',
    'role_change_confirm_body' => 'Sets :name’s role to :role. Permissions change immediately.',
    'role_changed_toast' => 'Role changed.',

    // Last-admin invariant
    'last_admin_guard' => 'The last administrator cannot be demoted or removed.',

    // Temp-password reveal (shown once)
    'temp_heading' => 'Account created',
    'temp_intro' => 'Share this initial password with :name. They are prompted to change it on first sign-in.',
    'temp_label' => 'Temporary password',
    'temp_warning' => 'Copy this password now — it is shown only once and cannot be retrieved later.',
    'temp_copy' => 'Copy',
    'temp_copied' => 'Copied',
    'done' => 'Done',

    // Remove (R5 confirm)
    'remove' => 'Remove',
    'remove_heading' => 'Remove account',
    'remove_body' => 'This permanently deletes the account and ends all of its sessions. This cannot be undone.',
    'remove_notify' => 'Account removed.',

    // Force logout (R5 confirm)
    'logout' => 'Sign out everywhere',
    'logout_heading' => 'Sign out everywhere',
    'logout_body' => 'This ends every active session for this account and rotates its remember-me token.',
    'logout_notify' => 'Account signed out of all devices.',
];