<?php

// Settings (profile + security) page strings (R16). Shared buttons live in common.php.
return [
    // Identity header
    'account' => 'Account',
    'role_admin' => 'Administrator',
    'two_factor_on' => '2FA on',
    'two_factor_off' => '2FA off',

    // Section nav tabs
    'tab_profile' => 'Profile',
    'tab_security' => 'Security',
    'tab_users' => 'Users',
    'tab_sessions' => 'Sessions',
    'tab_email' => 'Email',

    // Profile panel
    'profile_title' => 'Profile',
    'profile_subtitle' => 'Name and email',
    'name' => 'Name',
    'email' => 'Email',

    // Password panel
    'password_title' => 'Password',
    'password_subtitle' => 'At least 10 characters',
    'current_password' => 'Current password',
    'new_password' => 'New password',
    'repeat_password' => 'Repeat',
    'change_password' => 'Change password',

    // Two-factor panel
    'twofa_title' => 'Two-factor authentication',
    'twofa_subtitle' => 'TOTP (authenticator app)',
    'twofa_status_on' => '2FA is active',
    'twofa_status_off' => '2FA is not set up',
    'twofa_hint_on' => 'Login requires a TOTP code.',
    'twofa_hint_off' => 'Recommended — protects login with a second factor.',
    'twofa_setup' => 'Set up',
    'twofa_recommended' => '2FA is optional but recommended — secure your account with an authenticator or a security key.',
    'twofa_remove_totp' => 'Remove authenticator',

    // Account recovery (last-resort) note — admin-only, post-login
    'recovery_note' => 'Account recovery (last resort): sign in to the host over SSH and run `clusev reset-admin`.',

    // Notifications
    'profile_saved' => 'Profile saved.',
    'password_changed' => 'Password changed.',

    // Disable-2FA confirmation modal
    'disable_2fa_heading' => 'Remove authenticator',
    'disable_2fa_body' => 'Remove the authenticator (TOTP) as a factor? Security keys are kept.',
    'disable_2fa_notify' => 'Authenticator removed.',

    // Stub tabs (filled in 0.9.0)
    'coming_soon' => 'Coming in 0.9.0.',
    'users_title' => 'Users',
    'users_subtitle' => 'Manage accounts and roles',
    'sessions_title' => 'Sessions',
    'sessions_subtitle' => 'Active sign-ins',
    'email_title' => 'Email',
    'email_subtitle' => 'SMTP and notifications',

    // Page title
    'title' => 'Settings — Clusev',
];