{t(\"mistakesTableMistakeHeader\")}	{t(\"mistakesTableFixHeader\")}
{t(\"mistakesRow1Mistake\")}	}} />
{t(\"mistakesRow2Mistake\")}	}} />	{t(\"mistakesRow3Mistake\")}	"," }} />","	{t(\"mistakesRow4Mistake\")}	}} />	{t(\"mistakesRow6Mistake\")}	{t(\"mistakesRow6Fix\")}	{t(\"mistakesRow7Mistake\")}	}} />	}} />	}} />

\nweb/src/routes/HelpPage.tsx:130: }} />\nweb/src/routes/HelpPage.tsx-131-

\nweb/src/routes/HelpPage.tsx-132- \nweb/src/routes/HelpPage.tsx-133-\n--\nweb/src/routes/HelpPage.tsx-469- {t(\"glossaryNewVersionReadyDef\")}\nweb/src/routes/HelpPage.tsx-470- {t(\"glossaryTooManySignInAttemptsTerm\")}\nweb/src/routes/HelpPage.tsx-471- {t(\"glossaryTooManySignInAttemptsDef\")}\nweb/src/routes/HelpPage.tsx:472: {t(\"glossaryStepUpAuthTerm\")}\nweb/src/routes/HelpPage.tsx:473: {t(\"glossaryStepUpAuthDef\")}\nweb/src/routes/HelpPage.tsx-474- {t(\"glossarySomethingWentWrongScreenTerm\")}\nweb/src/routes/HelpPage.tsx-475- {t(\"glossarySomethingWentWrongScreenDef\")}\nweb/src/routes/HelpPage.tsx-476- {t(\"glossaryDailyEntryTerm\")}\n--\nweb/src/routes/HelpPage.test.tsx-244- // FIFO row above: proves the row exists and reads term + def from the\nweb/src/routes/HelpPage.test.tsx-245- // catalog, not a hardcoded literal.\nweb/src/routes/HelpPage.test.tsx-246- it(\"reads the step-up authentication row's term and definition from the catalog, not a hardcoded literal\", () => {\nweb/src/routes/HelpPage.test.tsx:247: withOverride(\"glossaryStepUpAuthTerm\", \"STEP-UP-TERM-MARKER\", () => {\nweb/src/routes/HelpPage.test.tsx:248: withOverride(\"glossaryStepUpAuthDef\", \"STEP-UP-DEF-MARKER\", () => {\nweb/src/routes/HelpPage.test.tsx-249- render();\nweb/src/routes/HelpPage.test.tsx-250- expect(screen.getByRole(\"rowheader\", { name: \"STEP-UP-TERM-MARKER\" })).toBeInTheDocument();\nweb/src/routes/HelpPage.test.tsx-251- expect(screen.getByText(\"STEP-UP-DEF-MARKER\")).toBeInTheDocument();\nweb/src/routes/HelpPage.test.tsx-252- expect(screen.queryByRole(\"rowheader\", { name: \"Step-up authentication\" })).not.toBeInTheDocument();\nweb/src/routes/HelpPage.test.tsx-253- // \"re-enter your current password\" also appears in the unrelated Signing-in\nweb/src/routes/HelpPage.test.tsx:254: // prose (signingInStepUp) — assert against phrasing unique to the glossary\nweb/src/routes/HelpPage.test.tsx-255- // def so this doesn't false-pass against that other section.\nweb/src/routes/HelpPage.test.tsx-256- expect(screen.queryByText(/extra check on top of being signed in/i)).not.toBeInTheDocument();\nweb/src/routes/HelpPage.test.tsx-257- });\n--\nweb/src/i18n/es.ts-1545- + \"Después de que la aplicación se actualiza es posible que se le pida iniciar \"\nweb/src/i18n/es.ts-1546- + \"sesión una vez más — eso es normal.\",\nweb/src/i18n/es.ts-1547- // #308 (machine-drafted, pending native review)\nweb/src/i18n/es.ts:1548: signingInStepUp:\nweb/src/i18n/es.ts-1549- \"Dos acciones en la pantalla Usuarios le piden volver a ingresar su contraseña \"\nweb/src/i18n/es.ts-1550- + \"actual directamente en el diálogo: crear otro propietario y restablecer la contraseña de un \"\nweb/src/i18n/es.ts-1551- + \"propietario existente. Esto confirma que realmente es usted antes de otorgar tanto acceso — ninguna \"\n--\nweb/src/i18n/es.ts-2038- + \"pasa un breve período de espera. Nunca afecta a una sesión que ya inició.\",\nweb/src/i18n/es.ts-2039-\nweb/src/i18n/es.ts-2040- // #308 (machine-drafted, pending native review)\nweb/src/i18n/es.ts:2041: glossaryStepUpAuthTerm: \"Autenticación reforzada (step-up)\",\nweb/src/i18n/es.ts:2042: glossaryStepUpAuthDef:\nweb/src/i18n/es.ts-2043- \"Una comprobación adicional además de haber iniciado sesión: antes de crear otro propietario o \"\nweb/src/i18n/es.ts-2044- + \"restablecer la contraseña de un propietario existente, la pantalla Usuarios le pide volver a \"\nweb/src/i18n/es.ts-2045- + \"ingresar su contraseña actual directamente en el diálogo. Esto confirma que realmente es usted \"\n--\nweb/src/i18n/en.ts-1868- // #308 — step-up re-confirmation for the two sensitive user-administration\nweb/src/i18n/en.ts-1869- // actions. Deliberately does NOT mention \"grant\"/\"token\" — that's internal\nweb/src/i18n/en.ts-1870- // mechanism, not user-facing language.\nweb/src/i18n/en.ts:1871: signingInStepUp:\nweb/src/i18n/en.ts-1872- \"Two actions on the Users screen ask you to re-enter your current password \"\nweb/src/i18n/en.ts-1873- + \"right there in the dialog: creating another Owner, and resetting an existing Owner's password. This \"\nweb/src/i18n/en.ts-1874- + \"confirms it's really you before handing out that much access — every other action on that screen \"\n--\nweb/src/i18n/en.ts-2348- + \"signed-in session.\",\nweb/src/i18n/en.ts-2349-\nweb/src/i18n/en.ts-2350- // #308\nweb/src/i18n/en.ts:2351: glossaryStepUpAuthTerm: \"Step-up authentication\",\nweb/src/i18n/en.ts:2352: glossaryStepUpAuthDef:\nweb/src/i18n/en.ts-2353- \"An extra check on top of being signed in: before creating another Owner or resetting an existing \"\nweb/src/i18n/en.ts-2354- + \"Owner's password, the Users screen asks you to re-enter your current password right there in the \"\nweb/src/i18n/en.ts-2355- + \"dialog. It confirms it's really you before handing out that much access — every other action on \"\n--\nweb/src/i18n/tl.ts-1605- + \"Pagkatapos ma-update ang app, maaaring hilingin sa iyong mag-sign in muli — \"\nweb/src/i18n/tl.ts-1606- + \"normal lang iyon.\",\nweb/src/i18n/tl.ts-1607- // #308 (machine-drafted, pending native review)\nweb/src/i18n/tl.ts:1608: signingInStepUp:\nweb/src/i18n/tl.ts-1609- \"May dalawang aksyon sa Users screen na humihiling sa iyong muling ilagay ang \"\nweb/src/i18n/tl.ts-1610- + \"kasalukuyan mong password mismo sa dialog: ang paggawa ng isa pang Owner, at ang pag-reset \"\nweb/src/i18n/tl.ts-1611- + \"ng password ng isang umiiral na Owner. Kinukumpirma nito na ikaw talaga bago bigyan ng ganoong \"\n--\nweb/src/i18n/tl.ts-2115- + \"na.\",\nweb/src/i18n/tl.ts-2116-\nweb/src/i18n/tl.ts-2117- // #308 (machine-drafted, pending native review)\nweb/src/i18n/tl.ts:2118: glossaryStepUpAuthTerm: \"Karagdagang pagpapatunay (step-up)\",\nweb/src/i18n/tl.ts:2119: glossaryStepUpAuthDef:\nweb/src/i18n/tl.ts-2120- \"Isang karagdagang tsek bukod sa pagiging naka-sign in: bago gumawa ng isa pang Owner o mag-reset ng \"\nweb/src/i18n/tl.ts-2121- + \"password ng umiiral na Owner, hinihiling ng Users screen na muling ilagay ang kasalukuyan mong \"\nweb/src/i18n/tl.ts-2122- + \"password mismo sa dialog. Kinukumpirma nito na ikaw talaga bago bigyan ng ganoong kalaking access \"\n",{"_425":594,"_407":595,"_386":387,"_409":393},1785605898859,{"_447":592,"_448":596,"_450":597,"_452":453,"_391":35,"_454":35,"_45":598,"_456":599,"_458":459,"_400":116,"_95":460},"/bin/bash -lc \"git show --stat --oneline bdfe265 && git show --format=fuller --find-renames bdfe265 -- web/src/routes/HelpPage.tsx web/src/routes/HelpPage.test.tsx web/src/i18n/locales/en.ts web/src/i18n/locales/es.ts web/src/i18n/locales/tl.ts && printf '\\\\n--- relevant source ---\\\\n' && rg -n -C 3 'glossaryStepUpAuth|signingInStepUp' web/src/routes/HelpPage.tsx web/src/i18n web/src/routes/HelpPage.test.tsx\"",[600],"exec-afdd19c0-1818-4580-ac69-a46f96ef33d8","92550",{"_448":601,"_95":463},"git show --stat --oneline bdfe265 && git show --format=fuller --find-renames bdfe265 -- web/src/routes/HelpPage.tsx web/src/routes/HelpPage.test.tsx web/src/i18n/locales/en.ts web/src/i18n/locales/es.ts web/src/i18n/locales/tl.ts && printf '\\n--- relevant source ---\\n' && rg -n -C 3 'glossaryStepUpAuth|signingInStepUp' web/src/routes/HelpPage.tsx web/src/i18n web/src/routes/HelpPage.test.tsx",{"_407":603,"_386":387,"_409":393},{"_431":586,"_45":604,"_467":605,"_414":606,"_184":470,"_471":-5,"_400":116,"_95":472},"ctc_0d699e7cc1c36f97016a6e2f07db14819fb4626d3404875fa5","const r = await tools.exec_command({cmd:\"git show --stat --oneline bdfe265 && git show --format=fuller --find-renames bdfe265 -- web/src/routes/HelpPage.tsx web/src/routes/HelpPage.test.tsx web/src/i18n/locales/en.ts web/src/i18n/locales/es.ts web/src/i18n/locales/tl.ts && printf '\\\\n--- relevant source ---\\\\n' && rg -n -C 3 'glossaryStepUpAuth|signingInStepUp' web/src/routes/HelpPage.tsx web/src/i18n web/src/routes/HelpPage.test.tsx\",\"workdir\":\"/workspace/cluckwork\",\"yield_time_ms\":10000,\"max_output_tokens\":30000}); text(r.output);\n",{"_419":393},{"_407":608,"_386":387,"_409":393},{"_410":-5,"_475":609,"_45":610,"_414":611,"_479":612,"_95":481},"gAAAAABqbi8HH6xUFtsEdkvr80A3ZD0tLtMIeF3rx0sGUpTUZEKjGy_-Ex5c9vDjF7mVvJzcTd1V9qWaeQDa38ynO2HgnjXi1sm520mk_wHPsfrK7gmMeG62_44JwO7Xxq3d78AzrHwziEpo6B-c6GqVyJrkw4cNC5unAL-mxgTIj-G4gmAVrtpXL7yQr6TdFWClay_6o6ddE69tOvu7odUMF8pgMP02gVSiIZ8hguOB63tNSomPtEj14GrSVlSRPYNBmUWf23zhgCdh1ej890dZ7YMBMI31E2PySIwSG6iwKZhl6GwnXE-iciCc8-BKrqv0ScgJ49n7Z1aMOVmxrWzsvkN2T1S8sQvBb2eaO84xaEmvdSskGBxGpWJNZqSrVFKQImXBn5y-7JyN4-rRcSpxcL2CV1rMtS7H3XPBV9mMi9MfRQeWg_0Lsdhqpmye2xkjtX6TkYzr0h4UG71XqzHIumJd5TY-dsLc58Katdc5rAGZiRzblrJS-341ntro9jRnMau58OjttpQGhKJHwLXg2kG6eY1y6rrACsO2M-7RSD2bzY75_iRohUX4-L7KYFwf7VZTAcNDXl_kz6Fj_3zPH0w6dC1fJItMEJKOrkcESHuyWD6RIeyVsicB-_kRzXAEWDPjtpw3I6qCSMGC0ucPw7vONLHpA9oEE2BdQa8Ns4ob3DwTTAIDVAEaQitxdh0mwjTLMjsSKpkffgCTTFOVJI9_bi1-puYZzcsNyhW_I2a-AJ7xFvg3xByuLBT9mjBWnLU2AamS_oagVLdFqyUhq25IQPFMjFTnxodCktfZW5kYjyyXw9TBvFgv8UCmBJt-1074xMiPNkrptwCLs8sqIIbYfHtAnHagzlISwzpqHzykYJJhhrmBso_Afq2OZvkVnUhm_9DB6J2J6a32gIAo4tQ2PXWGJ9GmVWcZclNPnTNJGCuddTP8iGu2rqAExU6nVOoD0P2P-6v2gMpmZwSSyrD-MT7ZNA==","rs_0d699e7cc1c36f97016a6e2f074208819fb877a4c1c1042e03",{"_419":393},[613],{"_49":614,"_95":485},"**Inspecting commit diffs**",{"_425":616,"_407":617,"_386":387,"_409":393},1785605895875,{"_410":618,"_45":610,"_479":619,"_95":481},[],[614],{"_407":621,"_386":387,"_409":393},{"_431":622,"_45":-5,"_414":623,"_184":-5,"_434":624,"_95":436},"call_gUNm9Xp7z3fBO6mFJKLFXsmy",{"_419":393},{"_317":625,"_438":-5},[626,627],{"_49":629,"_95":442},{"_49":628,"_95":442},"--- agents ---\n../cluckwork/AGENTS.md\n--- status ---\n## work\n--- head ---\nbdfe265 docs(web): add step-up authentication to the in-app glossary (#308)\n--- graph ---\n/bin/bash: line 5: graphify: command not found\n","Script completed\nWall time 0.4 seconds\nOutput:\n",{"_425":631,"_407":632,"_386":387,"_409":393},1785605893185,{"_447":628,"_448":633,"_450":634,"_452":453,"_391":35,"_454":35,"_45":635,"_456":636,"_458":459,"_400":116,"_95":460},"/bin/bash -lc \"printf '%s\n' '--- agents ---'; find .. -name AGENTS.md -print; printf '%s\n' '--- status ---'; git status --short --branch; printf '%s\n' '--- head ---'; git log -1 --oneline; printf '%s\n' '--- graph ---'; test -f graphify-out/graph.json && graphify query \\\"step-up authentication in-app glossary HelpPage translations test\\\" || true\"",[637],"exec-7be1a0fc-98e8-45b3-bea0-754e94a01f55","39860",{"_448":638,"_95":463},"printf '%s\n' '--- agents ---'; find .. -name AGENTS.md -print; printf '%s\n' '--- status ---'; git status --short --branch; printf '%s\n' '--- head ---'; git log -1 --oneline; printf '%s\n' '--- graph ---'; test -f graphify-out/graph.json && graphify query \"step-up authentication in-app glossary HelpPage translations test\" || true",{"_407":640,"_386":387,"_409":393},{"_431":622,"_45":641,"_467":642,"_414":643,"_184":470,"_471":-5,"_400":116,"_95":472},"ctc_0d699e7cc1c36f97016a6e2f03162c819f925397bf1e1b7642","const r = await tools.exec_command({cmd:\"printf '%s\\n' '--- agents ---'; find .. -name AGENTS.md -print; printf '%s\\n' '--- status ---'; git status --short --branch; printf '%s\\n' '--- head ---'; git log -1 --oneline; printf '%s\\n' '--- graph ---'; test -f graphify-out/graph.json && graphify query \\\"step-up authentication in-app glossary HelpPage translations test\\\" || true\",\"workdir\":\"/workspace/cluckwork\",\"yield_time_ms\":10000,\"max_output_tokens\":20000}); text(r.output);\n",{"_419":393},{"_407":645,"_386":387,"_409":393},{"_410":-5,"_475":646,"_45":647,"_414":648,"_479":649,"_95":481},"gAAAAABqbi8DW7v2ttTHhyoxdWIqX2gU6-UR8WQ9QsOS2_TXY6gqq118OCQSyYZXq3_fKebEuOajgjFFQEqir4JlpZj23DF_xQ7LpY0JEJvT_gIIqCiXz1SaBFg9vDWu4houOqmKJcqNGnC05DFYeA46nhY4Rqh58dPkTve2VPxUpzpZCFty2PIZL8DOEw6kk-S8oUWJCWcolKLsTTL7MxNLFjAj-2YLFJmMtFfRK0l9Q1X8r_tRHgRlFKmtkTp0x3_U7I7uyTX3KBmCPC8vla1r36sS-gLs4d92Y6lkMBIjva_VV4x5vUKOvU09No83wPbx251r739YCwxqw65MXCtTBSxIQY2kJivj0PvVWfpJcR0mNyfuyVOydcDQ84NCbB57H6WnpvSUcyMp67hVnGX3aPuTlr3bf-CGgO5_YODB10pdHoXos3nLb0P2KgG2K-TGQdvqq-yrVH0OWkp1HZ8OpLYs_YXSbwG2Kkox5_vBfLOaxcrWczc79CcjjdLzQQkYyfs9BB1Dyr6KhpxtrZNoNi48keWLmQ-ChqobX5AuR-bb6ZQB8i88jx12oONFU59m0h7n9Zj4V02z31c2GX0i5kwIfkS4x-ZjOzFpDVwAexInqV5Hdd0SS1kSoUZc4-7xUpviGRdNh4CeMzIXVEGh6Pu5t9atLvxFxM-MiAD3QiOg96GOxP9PuKlzR0MCmo8SABhF2s5UKqCkMqQrvHEvc1m3NPogyuMcw9y9POqh54wkcH4pW6q7crhymBxVcq_IZs1P6gbdgJ5OpmBurDLB1nqFPItpub6kVmR3kN-6FdO8WOvKSwzLSegJi9wxA21YjXlO3AzatJomv0VzX8d-Q5oAEknTjv4yPffcBOVgtR5jcn1k9tyuH79DlZhXO8gJZugT0nq9Wqt6iAwWgO-GNSgT-0Whoz-uMdt2ecIek4PXCLMMtfx9cT7LCOVCawBmIxzJNkqBHtV1FA66Y4KzhZ4mg2i0WdJRTu6UxsD9P2zU5biEQ55azUoxreaBUkCrjPaAvHBEicE0YUtfswvCNOrGA08rhSGF7jEIAVtt0UuxEeCdbcgFDiWMHUrbGE2ZjycWVe3xHgXsWb82T7yowN9JmpXxqQHj-dBAbCJap5fjCTVa0q_byCFjjp3JIjrPwaYJvHMyPjS0V7crNe4gldc1p8eaGH5kPSqJt8DZ-4-ddWFsYdhpc2H0omYPd8i3N1JYVZFHL0FtcLO77AcUkpoYEZuSJLuid9IRIFFX1ehim3TUVrz-em0mhbd3GL1SWs5AbTT2zDE_CWDv3XrEgVxAL1ryHKxlZQCLQ-xzVb231HeSmfx1JECcW-aKWdCmOaWVvI5Cs_0wXcRtFuqVNhLb7o4RLSYNnFp-kfRJNZfUO66bNcm17I1X3nXYqHKNT3yRZ6Z57SifHRBQHb0gHkyaIx0UvLjSEssDdtx_t0ukPxEtuSA4rJN4ctV7G6xGhMEnNzU3AfNN1Z55HWT7UoYLHpimm1Q1ElqPcHxJsqWuQLJf5e1e6mD2B6u0yUzshzZKkN1MAABJgZl4Hm89QGek_oPR99cAscc1XwDj1obKaHQShEMlcP6-lzwjJ_ZcHqbKpQBrIWv-X4edpiuYVOTABIXydqyT4xqa6OFEmoS1k0RH3GppMy5y_waM1P6Q0n41ZuHU","rs_0d699e7cc1c36f97016a6e2efff0b8819fad34cffee18e2a43",{"_419":393},[650],{"_49":651,"_95":485},"**Inspecting latest commit and tests**",{"_425":653,"_407":654,"_386":387,"_409":393},1785605891107,{"_410":655,"_45":647,"_479":656,"_95":481},[],[651],{"_425":658,"_407":659,"_386":387,"_409":393},1785605885397,{"_660":-5,"_410":661,"_45":662,"_95":663},"clientId",[664],"019fbe67-8dd4-7793-9af1-10e188f014fc","userMessage",{"_49":665,"_666":667,"_95":49},"\nYou are Codex, assisting with follow-up actions on a GitHub pull request.\n\nInput blocks\n------------\n… # The comment or event that invoked you\n… # PR metadata (title, branches, SHAs, status, etc.)\n… # Comments / Reviews for the PR\n\nPossible triggers\n• A user mentions you (@codex)\n• A reviewer requests changes\n• An automated or internal system asks you to review / update\n\nGuidelines\n1. Read the block first and treat it as the primary intent.\n2. Always consult and to interpret and validate the trigger; use only context that materially affects your decision and ignore the rest.\n3. If the trigger comes from a comment thread, the first block will be combined earlier comments from the same thread, clearly indicated with `Comments in the same thread`.\n4. Remaining blocks are in chronological order, oldest first, one block per comment.\n5. When the trigger relates to CI/build status (e.g., “help me fix CI”), incorporate CI/status details found in as supporting context.\n6. If code change is needed, generate a **new** PR with the requested changes. The PR title and message should summarize the changes **on top** of the original pull request.\n@codex the P1 is addressed in bdfe265 — see the thread reply on discussion_r3696173627 for detail and verification.{\"title\":\"feat(api,web): require step-up authentication for privileged user administration (#308)\",\"body\":\"Closes #308. `priority:critical` — the last of the four issues blocking public deployment.\\n\\n## Threat\\n\\nA stolen but still-valid Owner access token (~15 min TTL, no server-side denylist) could create another Owner or reset an existing Owner's password. That turns a short-lived token theft into **durable** account control — the thief no longer needs the stolen token.\\n\\n## Mechanism (owner-decided: current-password re-confirmation)\\n\\n`POST /auth/step-up` re-confirms the caller's current password and mints a short-lived grant (5 min, `JwtOptions.StepUpGrantMinutes`): single-use, bound to account + user, with a **distinct audience** (`cluckwork-step-up`, never sourced from config) so it can't be used as a normal access token. Carried in `X-Cluckwork-Step-Up` — never the body, never as a Bearer token.\\n\\nInvalidated by:\\n- **security-stamp change** — any password change or reset rotates it, so the grant dies with the credential it proved\\n- **logout** — `IdentityProvider.RevokeRefreshTokenAsync` records the user's logout instant; grants issued at or before it are rejected\\n\\nEvery rejection reason collapses to one code (`Identity.StepUpRequired`, 403) so failures don't enumerate.\\n\\n## What is gated — deliberately narrow\\n\\nExactly two operations: **creating a user with Role=Owner**, and **resetting the password of a user who currently holds Owner**. These are the only two that can mint a new Owner or hand over an existing one.\\n\\nEverything else — Worker, Manager, Sales, ReadOnly, and every other admin action — is untouched, which is the \\\"accidental blanket prompt\\\" the issue explicitly warns against. Two tests pin the *negative* (`CreateWorker_NeedsNoStepUp…`, `ResetWorkersPassword_NeedsNoStepUp…`), and two of the mutation checks were deliberately **over-gating** mutations to catch a creeping blanket prompt.\\n\\nBreak-glass `recover-admin` (#265) is unaffected: the gate lives in the handlers, not `IIdentityProvider`, so the CLI verb and the seeders bypass it by construction.\\n\\n## ⚠️ This adds a third blocker to running more than one replica\\n\\nThe registry backing single-use and logout-revocation is **in-process** (`InMemoryStepUpGrantRegistry`), matching the existing in-memory per-IP rate limiter (#143). No new infrastructure, no schema change.\\n\\nThat is fine today — the deployment is single-instance — but it means **#308 joins #271 and #307 as a reason not to scale out**. With two replicas, a grant consumed on one is still unused on the other, and a logout recorded on one doesn't revoke grants on the other. It also fails **open** across a process restart, the same way the rate limiter's buckets do.\\n\\nWorth flagging loudly because #307 is in flight right now specifically to unblock multi-replica writes — clearing it would leave this as a quiet remaining hazard. Filed as a follow-up rather than solved here, since a shared store is exactly the \\\"new infrastructure\\\" this mechanism was chosen to avoid.\\n\\n## Tests\\n\\n16 backend (`StepUpAuthTests`): accept, plus missing / expired / replayed / wrong-account / revoked-by-stamp / revoked-by-logout, audience isolation, non-enumeration. 10 SPA (`UsersPage.test.tsx`): field visibility, success, never-stores-the-password, cancel, server rejection, expiry, non-Owner bypass, Owner reset, cancel-on-reset, logout-clears. Plus 6 in `client.test.ts`.\\n\\n**Mutation-checked across 13 production guards**, each reverted → confirmed RED → restored → confirmed GREEN.\\n\\nOne honest finding from that pass: the **wrong-account** case is protected *redundantly* by both the account-claim check and the per-user security-stamp comparison — neutralizing either alone left the test green; only removing both together turned it red. That's defense in depth rather than a test gap, but it means a single future regression in either guard would not be caught by that test alone.\\n\\n## Process deviation, disclosed\\n\\nProduction code and tests were written together rather than strictly test-first, given the scope. The 13-guard mutation pass is the substantive guarantee the red-first rule exists to provide, and it was run in full — but it is a deviation and I'd rather state it than let the test count imply otherwise.\\n\\n## Verification\\n\\n- `dotnet test Cluckwork.sln` — 1035/1035, 0 warnings\\n- `npm run typecheck` clean, `npx vitest run` — 1233/1233, `npm run build` succeeds\\n- `npm run test:coverage` — global 91.03/88.02/82.32/78.34 against floors 90/87/81/78; `client.ts` 96.51/89.15/98.02/100 against 94/85/95/100. **Floors unchanged** — every actual moved up, and the config comment records the re-measurement rather than re-baselining.\\n\\n## Docs\\n\\n`GLOSSARY.md` and the SPA Help page both updated, with es/tl shipped inline per the translate-now policy.\\n\\nNo migration — the schema lane belongs to #270 → #307 → #283.\\n\",\"base_ref\":\"91aeb696ea0b4336653b96c1147881403a5f11fc\",\"head_ref\":\"bdfe265bb1fa485116a4ab6c7c7824b851b19dba\",\"merge_commit_sha\":null,\"type\":\"pull_request_info\"}{\"type\":\"pull_request_comment\",\"body\":\"#### ⚠️ GitGuardian has uncovered 2 secrets following the scan of your pull request.\\n\\nPlease consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.\\n\\n\\n\\n

\\n

🔎 Detected hardcoded secrets in your pull request

\\n
\\n\\n| GitGuardian id | GitGuardian status | Secret | Commit | Filename | |\\n| -------------- | ------------------ | ------------------------------ | ---------------- | --------------- | -------------------- |\\n| [35146328](https://dashboard.gitguardian.com/workspace/16690/incidents/35146328?occurrence=286461060) | Triggered | Generic Password | d3e4d5447c5ce648b7b93c053f7829de4d9ea476 | web/src/api/client.test.ts | [View secret](https://github.com/mforce/cluckwork/commit/d3e4d5447c5ce648b7b93c053f7829de4d9ea476#diff-99f333248f6a93adfaddbb96af70717586072674c735fafaaa8234d252bb31adR687) |\\n| [35626202](https://dashboard.gitguardian.com/workspace/16690/incidents/35626202?occurrence=286461061) | Triggered | Generic Password | aace4feefbd1469b879b0e4cfc1b69c265e62977 | src/Cluckwork.Infrastructure/Identity/AccountLockout.cs | [View secret](https://github.com/mforce/cluckwork/commit/aace4feefbd1469b879b0e4cfc1b69c265e62977#diff-caf875722ff689aea1e93112afcc4dd43963549822a28d95e1837a7a82e07124R10) |\\n\\n\\n\\n

\\n\\n

\\n

🛠 Guidelines to remediate hardcoded secrets

\\n
\\n\\n1. Understand the implications of revoking this secret by investigating where it is used in your code.\\n2. Replace and store your secrets safely. [Learn here](https://blog.gitguardian.com/secrets-api-management?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) the best practices.\\n3. Revoke and [rotate these secrets](https://docs.gitguardian.com/secrets-detection/secrets-detection-engine/detectors/generics/generic_password#revoke-the-secret?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment).\\n4. If possible, [rewrite git history](https://blog.gitguardian.com/rewriting-git-history-cheatsheet?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment). Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.\\n\\nTo avoid such incidents in the future consider\\n\\n- following these [best practices](https://blog.gitguardian.com/secrets-api-management/?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) for managing and storing secrets including API keys and other credentials\\n- install [secret detection on pre-commit](https://docs.gitguardian.com/ggshield-docs/integrations/git-hooks/pre-commit?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) to catch secret before it leaves your machine and ease remediation.\\n\\n\\n

\\n\\n---\\n\\n^{🦉 [GitGuardian](https://dashboard.gitguardian.com/auth/login/?utm_medium=checkruns&utm_source=github&utm_campaign=cr1) detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Compare logout times at JWT precision**\\n\\nWhen a user logs out, signs back in, and obtains a step-up grant before the UTC second rolls over, the JWT's `ValidFrom` has whole-second precision while `RecordLogout` retains subsecond ticks. The new grant therefore appears to have been issued before the prior logout and is permanently rejected with 403, forcing the user to wait and re-enter their password for another grant. Normalize both timestamps to the same precision or carry a higher-precision issuance value.\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"src/Cluckwork.Infrastructure/Identity/StepUpGrantService.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `b84ef7da62`\\n \\n\\n

ℹ️ About Codex in GitHub

\\n
\\n\\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\\n- Open a pull request for review\\n- Mark a draft as ready\\n- Comment \\\"@codex review\\\".\\n\\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\\n\\n\\n\\n\\nCodex can also answer questions or update the PR. Try commenting \\\"@codex address that feedback\\\".\\n \\n

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"The lockout finding is correct and was the right call to block on. Fixed.\\n\\nYou're right that this is a *second* password-verification oracle, and that guarding only login leaves the per-IP limiter alone on the surface that matters most — which a distributed attacker rotating source IPs simply walks around. #128 exists because those two controls are meant to work together.\\n\\n`/auth/step-up` now checks `IsLockedOutAsync` first (same non-enumerating denial, still paying PBKDF2 so a locked account isn't distinguishable from a wrong password), records `AccessFailedAsync` on failure, and resets the count on success.\\n\\nThe lockout logic moved into a shared `AccountLockout` helper rather than being copied into the second call site. A duplicated retry loop is a second thing to forget when a third oracle appears — which is precisely how this one got missed.\\n\\n**Your meta-point is the most useful thing in this review**, and I've written it into the commit message so it survives: *mutation testing reverts guards that exist and is structurally blind to a guard that was never written.* Thirteen mutants all went red and none of them could have caught this. So the new coverage is positive tests rather than another mutant — locked out after the threshold, still working below it, failures cleared on success — with the enforcement half mutation-checked to confirm it reproduces your exploit exactly (six wrong then correct → 200 without the guard, refused with it).\\n\\nWorth noting the guard is load-bearing in a second way: removing it entirely doesn't even compile, because `db` becomes unread and warnings are errors here.\\n\\n**Minor (logout epoch) — also fixed.** You were right that `RevokeRefreshTokenAsync` only recorded the epoch when the presented row was still unrevoked, so a cookie already superseded by a background rotation recorded nothing and left a grant alive for its remaining lifetime. The lookup no longer filters on `RevokedAt` — identifying the user is what matters, not whether that particular row is live. A genuinely unknown token still records nothing.\\n\\nFull suite 1038/1038, 0 warnings; frontend 1233/1233, typecheck clean.\\n\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex your feedback has been address please check\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"To use Codex here, [create an environment for this repo](https://chatgpt.com/codex/cloud/settings/environments).\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex your issues have been addressed can you please check?\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Return a non-session status for a wrong step-up password**\\n\\nWhen the SPA submits an incorrect current password, this 401 is not merely displayed: `stepUp()` uses `apiPost()`, and `apiFetch()` treats every 401 as an expired access token, refreshes the session, and retries the same password. With a valid refresh cookie, one user attempt therefore records two failed accesses, causing the five-attempt account lockout to trigger after only three submissions and unnecessarily rotating the refresh token; if refresh is unavailable, it can instead sign the user out. Return a non-401 credential-rejection status, as the change-password flow does, or explicitly suppress transparent refresh for this endpoint.\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"src/Cluckwork.Api/Endpoints/Auth/AuthEndpoints.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `f12eeb9677`\\n \\n\\n

ℹ️ About Codex in GitHub

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Fixed in `0a18685`. The finding is real and the diagnosis was exact: `nbf` is a NumericDate, so `jwt.ValidFrom` is floored to the second while `RecordLogout` keeps ticks, and a grant minted at `:00.800` after a `:00.500` logout presented as `:00.000` and was refused.\\n\\n**Both suggested remedies are not equivalent — normalizing precision does not work here.** Flooring the stored logout time to the second leaves both values at `:00.000`, and the comparison is `<=`, so the fresh grant is still rejected. Reaching for strict `<` to compensate would be a security regression: it would accept a grant genuinely minted *earlier in the same second* as the logout, which is precisely what this check exists to stop. So this takes the second option — carry a higher-precision issuance value.\\n\\n`IssueAsync` now mints `stepup_iat_ticks` (`now.UtcTicks`, invariant culture) inside the signed grant; `ValidateAsync` reads that instead of `jwt.ValidFrom`. Standard `nbf`/`exp` are untouched, so ordinary JWT validation is unchanged.\\n\\n**The comparison in `InMemoryStepUpGrantRegistry` is deliberately left as `issuedAt <= loggedOutAt`.** Only its *input* got more precise. A grant minted at `:00.200` now presents `:00.200` rather than `:00.000`, so it is still `<=` a `:00.500` logout and still revoked. The fix widens nothing.\\n\\nFail-closed: a missing, non-numeric or out-of-range claim collapses into the same `DeniedError` as every other rejection — no fallback to the floored `nbf`. Non-enumeration, audience isolation, single-use `jti`, stamp revocation and account/user binding are unchanged.\\n\\n**One thing worth recording, because it nearly shipped a hole.** The obvious two-test pair — \\\"grant after logout, same second, accepted\\\" and \\\"grant before logout, same second, rejected\\\" — does *not* cover this. The second test passes under strict `<` as well (`0.2 < 0.5` either way), so it cannot detect the regression. A third test was needed, placing the grant and the logout at the *exact same instant* — the only tick where `<=` and `<` disagree.\\n\\n**Verification** (mutants re-run independently, not just taken from the implementation report):\\n\\n| Mutant | Result |\\n|---|---|\\n| revert to `jwt.ValidFrom` | **RED** — `CreateOwner_StepUpIssuedAfterLogoutInTheSameSecond_IsAccepted` |\\n| loosen to `issuedAt < loggedOutAt` | **RED** — `CreateOwner_StepUpIssuedAtTheExactLogoutInstant_IsStillRevoked` |\\n| disable the logout check | **RED** — 3 tests, incl. the pre-existing `CreateOwner_StepUpRevokedByLogout_Is403` |\\n| drop the fail-closed parse guard | does not compile — definite assignment makes a silent fail-open structurally impossible |\\n\\n`StepUpAuthTests` 22/22, full integration suite 644 passed / 0 failed, build clean at 0 warnings.\",\"path\":\"src/Cluckwork.Infrastructure/Identity/StepUpGrantService.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex the P2 (compare logout times at JWT precision) is addressed in `0a18685` — the grant now carries a tick-precision `stepup_iat_ticks` claim and the registry comparison stays `<=`, so the same-second-before-logout rejection is preserved. Reasoning and mutation results are in the reply on the original thread. Ready for your re-check.\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Codex Review: Didn't find any major issues. Already looking forward to the next diff.\\n\\n**Reviewed commit:** `0a186854d3`\\n\\n

ℹ️ About Codex in GitHub

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Fixed in `a5214ce`. Confirmed real, and it was the most consequential finding on this PR — because the endpoint it breaks is the one this same PR just hardened.\\n\\n`IssueAsync` returns `Error.Validation(\\\"Users.CurrentPasswordIncorrect\\\", …)` — the *identical* error value `ChangePassword` returns as a 400. The endpoint was overriding a validation error into a session-expiry status, and `apiFetch` treats every 401 as a stale access token: refresh, then replay the same wrong password. So one typed password cost two failed accesses, cutting the #128 five-attempt lockout **this PR introduced** down to three, and burning a refresh-token rotation each time.\\n\\nNow `StatusCodes.Status400BadRequest`, matching `ChangePassword`. Deliberately not 403 — that stays reserved for `StepUpErrorCodes.Required`, the non-enumerating grant-validation failure on the gated endpoints, which is a different thing and is untouched. The genuinely-unauthenticated branch (`!currentUser.IsResolved || !tenant.IsResolved`) stays 401, because that one really is a session problem.\\n\\n**The damage is invisible to a plain `HttpClient`** — it issues one request per attempt whatever the status — so a status-code assertion alone would not have caught a regression that reinstates the retry. `StepUpAuthTests` gained a `SpaLikeClient` that reproduces `apiFetch` exactly (refresh-and-replay on a 401, and only on a 401), with counts read off the user row via `UserManager`, not inferred from responses:\\n\\n| | fixed (400) | mutant (401) |\\n|---|---|---|\\n| 1 user attempt | 1 failed access | **2** |\\n| after 4 attempts | count 4, not locked | count 0, **locked** — Identity zeroes the counter on lockout; it had already tripped at attempt 3 |\\n| refresh token after 4 attempts | unrotated | rotated 4× |\\n\\n**Mutation results, re-run independently of the implementation.** Reverting 400 → 401 turns three tests red:\\n\\n- `StepUp_WrongCurrentPassword_IsACredentialRejection_NotASessionExpiry`\\n- `StepUp_WrongPassword_RecordsExactlyOneFailedAccessPerUserAttempt` — fails on the **count** (`Expected: 1 / Actual: 2`), asserted before the status on purpose so the mutant fails on the damage rather than its cause\\n- `StepUp_LockoutTripsOnTheFifthUserAttempt_NotTheThird` (`Expected: 4 / Actual: 0`)\\n\\nSPA side: flipping the mocked reply to 401 turns `issues exactly one request for a rejected password` red (`expected 1 times, but got 2 times`). A paired test asserts a *real* 401 still refreshes and retries, so the fix doesn't quietly disable transparent refresh everywhere. No green mutants.\\n\\n`client.ts` took a contract note only — no behaviour change; `UsersPage` renders `ApiError.message` either way, so the wrong-password text a user sees is unchanged.\\n\\nBuild clean at 0 warnings. Integration 646 passed / 0 failed (StepUpAuthTests 24/24); Domain 283, Application 114; `npm test` 1235 passed / 66 files; typecheck clean; coverage gate exit 0 with no floor lowered.\",\"path\":\"src/Cluckwork.Api/Endpoints/Auth/AuthEndpoints.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex the P2 (non-session status for a wrong step-up password) is addressed in `a5214ce` — now 400, matching `ChangePassword`, which returns the same `Users.CurrentPasswordIncorrect` error value. 403 stays reserved for `StepUpErrorCodes.Required` and the genuinely-unauthenticated branch stays 401.\\n\\nYour read on the impact was right and it was the sharpest finding on this PR: the double-count silently cut the #128 lockout **this same PR introduced** from five attempts to three. Tests now assert the failed-access count directly off the user row through an `apiFetch`-faithful client, since a plain `HttpClient` issues one request per attempt regardless of status and would not catch a regression. Full details and mutation results are in the reply on the thread.\\n\\nReady for your re-check.\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Revoke the access-token user's grant on logout**\\n\\nWhen two tabs hold access tokens for different users, the refresh cookie is shared while `tokenStore.ts` keeps each access token in that tab's memory; logging out from user A's tab can therefore present user B's cookie. This lookup records logout only for the cookie owner, so A's outstanding step-up grant remains usable with A's still-valid stolen access token despite A explicitly logging out (the same occurs if A's cookie is missing or expired). Include the authenticated access-token user in logout revocation when available rather than deriving the grant owner solely from the refresh cookie.\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"src/Cluckwork.Infrastructure/Identity/IdentityProvider.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `a5214cef64`\\n \\n\\n

ℹ️ About Codex in GitHub

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Fixed in `974feb6`. The premise holds on all three points, verified before touching anything:\\n\\n1. **Access token is per-tab** — `web/src/auth/tokenStore.ts` keeps it in a module-level `let accessToken`, one instance per tab.\\n2. **Refresh cookie is per-origin** — `AuthCookies.BuildOptions` sets `HttpOnly`, `SameSite=Strict`, `Path=/api/v1/auth`. One jar per browser profile; last login wins.\\n3. **Logout derived the grant owner solely from the cookie** — it read only `ReadRefreshCookie`, and `RevokeRefreshTokenAsync` recorded `RecordLogout(tokenRow.UserId, …)`. No bearer was consulted.\\n\\n**One thing your description didn't cover, and it decided the shape of the fix: the SPA sent no bearer on logout at all** (`raw(\\\"/auth/logout\\\", …)` with the optional access-token argument omitted). A server-side-only change would have been dead code against the real client — the \\\"when available\\\" case never occurred. So the fix spans both sides.\\n\\nAttaching a bearer then springs a trap: `IdempotencyMiddleware` gates on `tenant.IsResolved`, so an *authenticated* logout would start demanding an `Idempotency-Key` and 400. `/api/v1/auth/logout` is now exempt, and a mutant removing that exemption turns five tests red — so this was real, not theoretical.\\n\\n**Mechanism.** New `IIdentityProvider.RecordLogoutAsync(userId)` records the logout instant *without* revoking refresh tokens. `Logout` now guards the two axes independently: cookie present → revoke its token and record its owner; caller authenticated → record the bearer's subject. The SPA captures the bearer *before* the synchronous `clearAccessToken()` and sends it optionally, so an expired token simply leaves the call unauthenticated and the cookie path still ends the session.\\n\\n**The three cases:**\\n- *Cookie missing/expired, caller authenticated* — `RecordLogoutAsync` fires alone.\\n- *Unauthenticated with a valid cookie* (ordinary logout) — unchanged; pre-existing tests pass untouched.\\n- *Both present, same user* — idempotent for free: `RecordLogout` uses `AddOrUpdate` keeping the max, and both paths share the injected `TimeProvider`.\\n\\n**The bearer path is deliberately narrower than the cookie path.** It records the logout instant but does *not* revoke that user's refresh tokens — otherwise ending one tab would sign them out of every device. `Logout_WithAForeignCookie_DoesNotRevokeTheBearerUsersOtherSessions` pins that.\\n\\n**Mutation results:**\\n\\n| Mutant | Result |\\n|---|---|\\n| `RecordLogoutAsync` disabled | **RED ×2** — both finding-scenario tests (re-run independently) |\\n| idempotency exemption removed | **RED ×5** |\\n| swap instead of add (skip cookie revoke when authed) | **RED ×2** |\\n| over-revoke the bearer user's whole token family | **RED ×1** |\\n| record at `DateTimeOffset.MaxValue` (permanent poison) | **RED ×1** |\\n| SPA reads the token *after* the clear | **RED ×1** |\\n\\n**Honest caveat:** `…WhenCookieAndBearerAreTheSameUser` stays GREEN under the first mutant. That is correct — the cookie path already covers same-user logout, so it is a regression guard against over-/under-revoking rather than a bug detector. Mutants 2 and 3 do turn it red.\\n\\nNo GLOSSARY change: line 582 already promises grants are \\\"invalidated … by that user logging out\\\". No concept appears or changes meaning — the fix makes an already-documented contract true. The `StepUpGrantService` threat-model comment's \\\"Revoked by logout\\\" bullet was updated instead, preserving the non-enumerating collapse, audience isolation, single-use `jti`, stamp revocation and tick-precision rationale verbatim.\\n\\nBuild clean at 0 warnings; integration 653 passed / 0 failed (StepUpAuthTests 24 → 31); `npm test` 1237 passed; coverage gate exit 0 with no floor lowered.\",\"path\":\"src/Cluckwork.Infrastructure/Identity/IdentityProvider.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex the P2 (revoke the access-token user's grant on logout) is addressed in `974feb6`. Premise verified on all three points before changing anything — per-tab access token, per-origin cookie, and a logout that consulted only the cookie.\\n\\nTwo things your description didn't cover that shaped the fix:\\n\\n1. **The SPA sent no bearer on logout at all**, so a server-only change would have been dead code — the \\\"when available\\\" case never occurred against the real client. The fix spans both sides.\\n2. Attaching a bearer makes `IdempotencyMiddleware` (which gates on `tenant.IsResolved`) start demanding an `Idempotency-Key` on an authenticated logout. `/api/v1/auth/logout` is now exempt; a mutant removing that exemption turns five tests red.\\n\\nThe bearer path deliberately records the logout instant without revoking that user's refresh tokens — otherwise ending one tab would sign them out of every device, which a dedicated test pins. Six mutants, all red; one regression-guard test stays green under the first mutant and I've explained why in the thread rather than dressing it up as a kill.\\n\\nReady for your re-check.\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `974feb646c`\\n \\n\\n

ℹ️ About Codex in GitHub

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Record the bearer logout even if cookie revocation fails**\\n\\nWhen a refresh cookie is present and `RevokeRefreshTokenAsync` throws—for example, during a transient database outage—the exception prevents this bearer-specific path from running. The SPA still clears its local access token and treats logout as best-effort, but the user's outstanding step-up grant remains valid; if the database recovers before the grant expires, a captured access token and grant can still perform the privileged operation after the user logged out. Ensure the in-memory bearer logout is recorded independently of failures in the cookie revocation path.\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"src/Cluckwork.Api/Endpoints/Auth/AuthEndpoints.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Fixed in `d568f0c`. Correct, and it was a hole in the fix from one round earlier — I put the in-memory recording *after* the database call, so a transient outage skipped it entirely.\\n\\n**Shape: plain reordering, no try/catch.** `RecordLogoutAsync` (in-memory, cannot fail) now runs first; `RevokeRefreshTokenAsync` (hits Postgres, can throw) runs second. Reordering alone gives the independence asked for — the bearer path's success no longer depends on anything after it — and it needs no exception handling to reason about.\\n\\nThe exception is deliberately **not** caught: a logout that fails loudly when the database is down is worth keeping, and the SPA already treats logout as best-effort on its side. Response on that path is 500.\\n\\nOrdering matters in one direction specifically: a DB failure now leaves grants revoked but the refresh token alive. **Over-revoking is the fail-safe direction for a security control**; the previous order failed the other way.\\n\\n**A second, adjacent bug surfaced while writing the test, and I want to flag it explicitly rather than bury it.** Asserting \\\"fails loudly with a 500\\\" turned out to be impossible, because `UseExceptionHandler`'s `/error` re-execution passes back *through* `IdempotencyMiddleware` with the original tenant still resolved and no `Idempotency-Key` header — which none of login/refresh/change-password/step-up/logout ever send. So a genuine 500 on any of those routes was being silently downgraded to a misleading 400 \\\"Idempotency-Key header is required\\\". The \\\"fails loudly\\\" guarantee was already broken before this change.\\n\\n`IdempotencyMiddleware` now skips when `IExceptionHandlerFeature` is present — the same signal `Program.cs`'s Serilog request logging already uses to detect that re-execution. It is bundled in `d568f0c` because the new test cannot assert the real status without it; happy to split it into its own commit or PR if you would rather it travel separately.\\n\\n**Mutation check** (re-run independently): reverting *only* the reordering, keeping the middleware fix, turns `Logout_WhenCookieRevocationThrows_StillRecordsTheBearersLogout_AndFails500` red with `Expected: Forbidden, Actual: Created` — the grant was not revoked, which is precisely the finding. Restored → green.\\n\\nThe failure is injected by a `RevokeRefreshTokenThrowsDecorator` over the real `IdentityProvider`, registered via `ConfigureTestServices` following the file's existing override pattern — no simulated database outage.\\n\\nBuild clean at 0 warnings; integration 654 passed / 0 failed (`StepUpAuthTests` 31 → 32); Domain 283, Application 114.\",\"path\":\"src/Cluckwork.Api/Endpoints/Auth/AuthEndpoints.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex the P2 (record the bearer logout even if cookie revocation fails) is addressed in `d568f0c` — the in-memory recording now runs before the database revoke, so a transient outage over-revokes rather than under-revokes. The exception still propagates; that path is a 500.\\n\\nWriting the test for it surfaced a second, adjacent bug worth your attention: `UseExceptionHandler`'s `/error` re-execution passes back through `IdempotencyMiddleware` with the tenant still resolved and no `Idempotency-Key`, so a genuine 500 on any auth route was being silently downgraded to a misleading 400 \\\"Idempotency-Key header is required\\\". The \\\"fails loudly\\\" property was already broken before this change. That is fixed in the same commit (skip when `IExceptionHandlerFeature` is present) and called out in the thread reply — say if you would rather it travel as its own commit.\\n\\nMutation-checked: reverting only the reordering turns the new test red with `Expected: Forbidden, Actual: Created`. Ready for your re-check.\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Clear the step-up password when leaving the Owner role**\\n\\nIf an operator selects Owner, enters their current password, and then changes the role to Worker before submitting, this conditional branch never clears `createStepUpPassword`; the field is merely unmounted. A successful Worker creation also closes the dialog via `setCreating(false)` rather than `closeCreate`, so reopening the dialog and selecting Owner reveals the retained account password. Clear this state when switching away from Owner, or unconditionally when the create flow settles.\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"web/src/routes/UsersPage.tsx\",\"side\":\"RIGHT\",\"line\":208}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `d568f0cdab`\\n \\n\\n

ℹ️ About Codex in GitHub

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Fixed in `aa3e6df`. Real, and worth noting it is the **same structural bug as #314**, which was fixed on this repo earlier today for exactly the same reason.\\n\\nYour trace is exact: pick Owner, type the current password, switch to Worker, submit. The `role === OWNER_ROLE` branch that clears the field never runs, and the success path did not clear it either — so the operator's **own account password** survived in state and appeared on the next open with Owner selected.\\n\\nThe root cause is the duplication you pointed at. `closeCreate()` exists precisely to be the one reset path (that was #314's fix), but the success path repeated the field list inline and called `setCreating(false)` directly. The copy then drifted the moment #308 added new dialog state: the inline list never learned about `createStepUpPassword`.\\n\\nSo rather than adding a sixth line to the duplicate, the success path now closes through `closeCreate()`. New dialog state can only be forgotten in one place instead of two.\\n\\n**On the test that should have caught this:** `never stores the entered step-up password: reopening after a successful use shows it empty` submits **as Owner**, so it runs the clearing branch on the way past and passes with the bug present. The new test switches Owner → Worker before submitting, which is the only path where nothing clears the field. It also asserts `stepUp` was never called and the grant argument is `undefined`, so it fails if the switch silently still requested a grant.\\n\\nMutation-checked: restoring the duplicated reset list turns the new test red (`expected '' but got 'OwnerCurrentPw!1'`-shaped failure on the reopened field); restored → green. `UsersPage.test.tsx` 58 passed, full web suite 1238 passed / 66 files, typecheck clean, coverage gate exit 0 with no floor lowered.\",\"path\":\"web/src/routes/UsersPage.tsx\",\"side\":\"RIGHT\",\"line\":208}{\"type\":\"pull_request_comment\",\"body\":\"@codex the P2 (clear the step-up password when leaving the Owner role) is addressed in `aa3e6df`.\\n\\nYou found a credential leak of the operator's *own* account password, and the root cause was the duplication you pointed at: `closeCreate()` is supposed to be the single dialog-reset path, but the create-success path repeated the field list inline — so when #308 added `createStepUpPassword`, only one of the two copies learned about it. Fixed by closing through `closeCreate()` rather than extending the duplicate, so future dialog state can only be forgotten in one place.\\n\\nWorth flagging that the existing \\\"reopening after a successful use shows it empty\\\" test passes with the bug present, because it submits *as* Owner and so runs the clearing branch. The new test switches Owner → Worker first, which is the only path where nothing clears the field. Mutation-checked red. Ready for your re-check.\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Codex Review: Didn't find any major issues. Delightful!\\n\\n**Reviewed commit:** `aa3e6df813`\\n\\n

ℹ️ About Codex in GitHub

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex thanks — noting that the `Didn't find any major issues` verdict was for `aa3e6df`, but the branch has since been **rebased onto `main`** and the head is now `748a546`. Two things changed in that rebase that are worth a fresh look rather than inheriting the previous pass:\\n\\n1. The branch's own copy of the `/error` exception-handler skip in `IdempotencyMiddleware` was **dropped** — that fix now comes from `main` (#345/#346), which landed the same guard independently while this PR carried it.\\n2. The rebase across #337 (which restructured that middleware and changed its constructor) initially produced **no conflict** while silently duplicating the guard; that was caught and removed, but the file is worth re-reading on the rebased head.\\n\\nWhat the branch still contributes to that file is only the two `ResponseNotCacheable` entries — `/api/v1/auth/step-up` and `/api/v1/auth/logout` — both of which are load-bearing: without the logout entry, an authenticated logout resolves a tenant and 400s for a missing `Idempotency-Key`, so the SPA could not log out at all.\\n\\nIntegration 675 passed, web 1238 passed, coverage gate exit 0. Ready for a re-check against `748a546`.\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Record the cookie owner's logout before revocation**\\n\\nWhen the token-owner lookup succeeds but `ExecuteUpdateAsync` subsequently throws—for example, because of a transient connection failure or deadlock—these lines never run. If the logout has no valid bearer, or its bearer belongs to another tab's user, the SPA has already cleared local authentication and treats the failure as best-effort, but the cookie owner's captured access token and unexpired step-up grant remain usable. The fresh evidence beyond the prior bearer-ordering comment is that the rebased code still places the cookie-owner registry update after the throwing database update; record it immediately after the successful owner lookup instead.\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"src/Cluckwork.Infrastructure/Identity/IdentityProvider.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `748a546204`\\n \\n\\n

ℹ️ About Codex in GitHub

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Fixed in `185ff3a`. Correct, and it is my previous fix applied one layer too shallow.\\n\\nLast round I reordered `AuthEndpoints.Logout` so the bearer's in-memory `RecordLogout` runs before the database revoke. But inside `RevokeRefreshTokenAsync` the **cookie owner's** `RecordLogout` still sat after `ExecuteUpdateAsync` — so a throwing bulk update skipped it, and the cookie owner's grant survived their own logout while the SPA had already cleared local auth. I applied the fail-safe ordering principle at one call site and never checked whether it held at the other; your \\\"the rebased code still places the cookie-owner registry update after the throwing database update\\\" is exactly right.\\n\\n`RecordLogout` now runs immediately after the owner lookup, before the bulk update. A database failure therefore over-revokes (grants dead, refresh row possibly still live) rather than under-revoking — the same direction as the outer path.\\n\\n**On the test, including two mistakes of mine worth recording.**\\n\\nMy first attempt asserted the HTTP status of a faulted logout and never fired at all: I wrote a `DbCommandInterceptor` matching the string `\\\"RefreshTokens\\\"`, but the entity maps to a snake_cased table — `RefreshToken.cs` does `builder.ToTable(\\\"refresh_tokens\\\")`. The match could never hit, so the request returned 204 and the test would have passed for the wrong reason. I then misdiagnosed that failure publicly as a DI problem (a second `AddDbContext` being a TryAdd no-op). That diagnosis was wrong; the cause was my own string.\\n\\nThe replacement exercises `RevokeRefreshTokenAsync` directly as a unit — the pattern `ReportQueryBoundingTests` already uses — building `AppDbContext` with the interceptor attached and handing the provider a privately-held `InMemoryStepUpGrantRegistry`, so the assertion reads the actual call rather than an HTTP status. A second scaffolding bug surfaced there too: `ExtractRefreshCookie` returns the raw percent-encoded `Set-Cookie` text, which every other test round-trips through ASP.NET's own cookie parsing; calling the provider in-process skips that, so the token needs `Uri.UnescapeDataString` before the hash matches.\\n\\nThe broken HTTP-level test was deleted rather than left beside the working one.\\n\\n**Mutation-checked independently:** restoring the `ExecuteUpdateAsync`-before-`RecordLogout` ordering turns `RevokeRefreshTokenAsync_WhenTheBulkUpdateThrows_StillRecordsTheOwnersLogout` red (`Expected: True, Actual: False`) with the other 32 still green; restored → 33/33. The sibling bearer-path test is untouched and still passes.\\n\\nBuild clean at 0 warnings; integration suite 676 passed / 0 failed; Domain 283, Application 114.\",\"path\":\"src/Cluckwork.Infrastructure/Identity/IdentityProvider.cs\",\"side\":\"RIGHT\",\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@codex the P2 (record the cookie owner's logout before revocation) is addressed in `185ff3a`.\\n\\nYou were right that this was unfixed by the earlier bearer-ordering change: I had applied the fail-safe ordering at the outer call site (`AuthEndpoints.Logout`) and left the same hazard inside `RevokeRefreshTokenAsync`, where the cookie owner's `RecordLogout` still followed the throwing bulk UPDATE. It now runs immediately after the owner lookup, so a database failure over-revokes rather than under-revokes.\\n\\nCoverage is a direct unit-level exercise of `RevokeRefreshTokenAsync` with a fault interceptor on the bulk UPDATE, asserting the registry rather than an HTTP status — my first HTTP-level attempt silently never fired (it matched `\\\"RefreshTokens\\\"` while the table is `refresh_tokens`) and would have passed for the wrong reason; it was deleted rather than kept. Mutation-checked: restoring the old ordering turns it red with `Expected: True, Actual: False`.\\n\\nIntegration 676 passed. Ready for your re-check.\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nHere are some automated review suggestions for this pull request.\\n\\n**Reviewed commit:** `185ff3a3bb`\\n \\n\\n

ℹ️ About Codex in GitHub

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"**_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Add step-up authentication to the in-app glossary**\\n\\nThis adds the step-up explanation to the Help page's sign-in section and the product glossary, but the live glossary table at the bottom of `HelpPage` and its translation keys remain unchanged. Consequently, users consulting the in-app glossary cannot find the newly introduced step-up-authentication concept; add a localized glossary row alongside this Help update as required for user-visible behavior changes.\\n\\nAGENTS.md reference: [AGENTS.md:L187-L187](https://github.com/mforce/cluckwork/blob/185ff3a3bb9793d498145bc9d56238d8660ee9e5/AGENTS.md#L187-L187)\\n\\nUseful? React with 👍 / 👎.\",\"path\":\"web/src/routes/HelpPage.tsx\",\"side\":\"RIGHT\",\"line\":131}{\"type\":\"pull_request_comment\",\"body\":\"Valid, and it's the same defect I already fixed on #335 — I just didn't carry the lesson across. Fixed in `bdfe265`.\\n\\n**Confirmed before fixing.** `grep -i \\\"step-up\\\" web/src/routes/HelpPage.tsx` returned exactly one hit: line 130, the `signingInStepUp` sign-in prose. The glossary table (`

`, rows 462–500+) had no step-up row at all. `specs/product/GLOSSARY.md:563` had the concept; the in-app surface didn't. So the finding is exactly right.\\n\\nWhat changed (5 files, +44):\\n- `HelpPage.tsx` — one `` using `glossaryStepUpAuthTerm` / `glossaryStepUpAuthDef`, placed immediately after `glossaryTooManySignInAttempts`. Both are sign-in-security concepts; the roles row is about permissions, not an authentication barrier.\\n- `en.ts` / `es.ts` / `tl.ts` — the key pair in all three, es/tl machine-drafted inline per the translate-now policy (pending native review), no English placeholders. Copy is user-facing only: no JWT/grant/audience, no issue numbers.\\n- `HelpPage.test.tsx` — one test on the existing `withOverride` pattern, so it asserts against `i18n.addResource` markers rather than hardcoded English.\\n\\nVerification, run by me on the pushed tree:\\n\\n- `npm run typecheck` — clean. (This is also the es/tl parity check: the catalogs are typed against `en`'s shape, so a key missing from one is a compile error.)\\n- `HelpPage.test.tsx` — 18/18. Full web suite — 1239/1239 across 66 files.\\n- Mutation 1, remove the ``: RED, `Unable to find role=\\\"rowheader\\\" ... name \\\"STEP-UP-TERM-MARKER\\\"`, 1 failed / 17 passed. Restored → 18/18.\\n- Mutation 2, keep the row but point the `` at `glossaryTooManySignInAttemptsDef`: also RED, 1 failed / 17 passed. This one matters more than the first — a row-presence test would survive it, and a mis-wired definition cell is the failure this row is most likely to have in practice. Restored → 18/18.\\n\\nOne note on the test, since it nearly shipped wrong: my first draft asserted the negative against `/re-enter your current password/i`, which also appears in the `signingInStepUp` prose elsewhere on the same page — the assertion would have been answered by a different section entirely. It now asserts against phrasing unique to the glossary definition.\\n\",\"path\":\"web/src/routes/HelpPage.tsx\",\"side\":\"RIGHT\",\"line\":131}","text_elements",[],{"_407":669,"_386":387,"_409":393},{"_410":670,"_412":-5,"_45":-5,"_414":671,"_416":-5,"_99":329,"_95":418},[672],{"_419":393},{"_49":665,"_95":442},{"_407":674,"_386":387,"_409":393},{"_410":675,"_412":-5,"_45":-5,"_414":676,"_416":-5,"_99":329,"_95":418},[677,678],{"_419":393},{"_49":680,"_95":442},{"_49":679,"_95":442},"\n /workspace/cluckwork\n bash\n 2026-08-01\n Etc/UTC\n /workspace/cluckwork\n","# AGENTS.md instructions for /workspace/cluckwork\n\n\n# AGENTS.md — Cluckwork\n\nPoultry egg-farm management system. Backend: .NET 10 (C#), layered DDD. Frontend: React 19 + Vite SPA in `web/`. Postgres via EF Core.\n\nThis file is the shared brief for any coding agent (Claude Code, Codex, etc.).\n\n## Layout\n\n```\nsrc/\n Cluckwork.Domain aggregates, value objects, domain events (no deps)\n Cluckwork.Application feature handlers, repository interfaces, validators\n Cluckwork.Infrastructure EF Core, Identity/JWT, repositories, seeding, jobs\n Cluckwork.Api minimal-API endpoints, middleware, Program.cs\nweb/ React/Vite SPA (see web/README.md)\ndeploy/ docker-compose (.yml prod, .dev.yml dev DB), .env.example\nspecs/ product + technical specs, wireframes\ntests/ Domain.Tests, Application.Tests, Api.IntegrationTests\n```\n\nDependencies point inward: Api → Application/Infrastructure → Domain. Domain depends on nothing.\n\n## Build / test / run\n\n```bash\ndotnet build Cluckwork.sln # warnings are errors — keep it clean\ndotnet test Cluckwork.sln # 688 tests as of 2026-07; integration needs Docker\n```\n\n- Integration tests spin up a real Postgres via Testcontainers (`docker` required). No SQLite — EF SQL semantics differ.\n- Run full stack (prod-like): `docker compose -f deploy/docker-compose.yml up --build` → SPA + API on http://localhost:8080 (single container; API serves the built SPA from `wwwroot`).\n- Run frontend dev: `cd web && npm run dev` → http://localhost:5173 (proxies `/api` → :8080).\n- Debug API (no docker stack): `docker compose -f deploy/docker-compose.dev.yml up -d` (Postgres on :5432), then run/debug `Cluckwork.Api` (Development env). Dev secrets live in user-secrets, not files.\n\n## Conventions (follow these)\n\n- Result pattern: domain/handlers return `Result` / `Result` (see `Domain/Common`). Don't throw for expected failures; throw only for invariant violations (e.g. `Flock.Create` guards).\n- Every aggregate mutation must bump `Version`. `Version` is an EF concurrency token (`IsConcurrencyToken`) — EF puts the original value in the UPDATE's WHERE but never auto-increments it. A mutation without `Version++` silently loses concurrent races (both writers match `WHERE Version = N`) instead of 409ing. This bug shipped three times (`RecordProduction` was correct; `Submit`/`Lock` and `SalesOrder.AddItem` weren't) — each now has a parallel-race integration test; add one for any new mutation.\n- Handler per feature, invoked directly from endpoints — no MediatR. Register handlers/validators/repos in `Program.cs`.\n- Validation: FluentValidation validators (`*Validator`), one per command; endpoints call `ValidateAsync` and return `ValidationProblem`.\n- Endpoints: minimal APIs grouped under `/api/v1/...` via `MapEndpoints`; writes require auth + an `Idempotency-Key` (middleware).\n- Multi-tenancy: every tenant-owned entity has `AccountId`; enforced by an EF global query filter + a `TenantStampInterceptor` (stamps on insert). `TenantContext` is resolved per-request from the JWT `account_id` claim. At startup it's unresolved → use `IgnoreQueryFilters()` in seeders.\n- Auth: asymmetric JWT + rotating refresh tokens. PEM keys come from config with escaped `\\n`; normalize via `PemKey.Normalize` before `ImportFromPem`. Integration tests generate an ephemeral RSA pair at test-process startup (`TestJwtKeys` in `CluckworkWebApplicationFactory.cs`) — no real key material is ever committed to source (`deploy/.env.example` carries PEM armor with a `replace-me` body, not a usable key).\n- Migrations + seed: EF migrations auto-apply on startup (`Database:MigrateOnStartup`, default true — but Production sets it `false`; the `migrate` command runs DDL out-of-band, see the #263 bullet below). `DatabaseSeeder` seeds the default account + admin user + `Admin` role on every boot — **credentials only from `Seed:*` config, never a fallback secret; failures log + skip (never crash the host), including if the schema is not yet migrated.\n- Seed command (#280, #284): demo sample data is NOT boot-seeded — there is no `Seed__Demo` flag anymore. Run it explicitly, against a database that has already been booted once so the base seed above exists (default account, `Admin` role, default egg grades — the demo seed needs all three and fails fast with a clear message if they're missing): `ASPNETCORE_ENVIRONMENT=Development dotnet Cluckwork.Api.dll seed --profile demo` (an unset `ASPNETCORE_ENVIRONMENT` defaults to Production, which the guard below blocks — always set it for a local/dev/CI run). The command migrates the schema, runs `DemoDataSeeder`, then exits (Kestrel never starts); it is authoritative (seeds regardless of any config) and fail-loud (a real exit code: `0` only when data was actually seeded or was already present, non-zero with an stderr message otherwise — never a silent no-op). `DemoDataSeeder` is registered only when `!IsProduction()` (defense-in-depth): running the command against a Production-env process fails with a clear message instead of writing fake data. Intended flow: the serving process for a real farm stays Production; a non-Production process (dev box, CI, or a sim/load-test harness) runs `seed --profile demo` against its own already-base-seeded database. The `simulation` profile (#279) sits in the same `switch` with the same authoritative + fail-loud + Production-guarded contract (`SimulationDataSeeder`); it additionally records its date anchor + a completion marker in a durable `SimulationSeedState` row (anchor written before the first fixture mutation; completion stamped only after the manifest succeeds). A clean re-run — even one straddling a UTC-midnight rollover — reuses that anchor and converges to `AlreadySeeded` with an unchanged manifest fingerprint instead of writing a shifted duplicate set; `AlreadySeeded` is reported only when the counts are unchanged, so a `SimulationOptions` change that adds fixtures re-runs as `Seeded`. The durable anchor can't be poisoned by a mid-seed crash or by foreign daily entries a load test writes into the account (a data-derived anchor could); but a polluted account still fails the exact count validation closed (`Failed`) rather than certifying a fixture that no longer matches the definition.\n- Break-glass recovery (#265): `recover-admin` is a second one-off CLI verb on the same binary, same run-then-exit shape as `seed` — but deliberately NOT environment-gated (it must work against a real Production database): `dotnet Cluckwork.Api.dll recover-admin --email [--account ] [--reason ]`. For a locked-out account (the sole-Owner-lost-password case, no email/SMTP reset path) it, in one transaction, resets to a freshly generated temporary password (never one passed on the command line), rotates the security stamp, revokes every refresh token, and writes a conspicuous `User.BreakGlassReset` audit row carrying `--reason`. The temp password is printed to stdout only (never the logger/OTLP) and exit `0`; failures go to stderr with exit `1` and change nothing. `AdminRecoveryService` orchestrates; `IdentityProvider.BreakGlassResetAsync` shares the reset/revoke core with `SetUserPasswordAsync`. Full procedure + verification drill: `docs/runbooks/break-glass-account-recovery.md`.\n- Farm timezone + tzdata/ICU image constraint (#264): the default account is provisioned from `Seed:TimeZoneId` (default `\"UTC\"`; set the farm's real IANA id, e.g. `Asia/Manila`, at cutover) — no longer a hard `\"UTC\"` literal in `DatabaseSeeder`. The farm clock resolves IANA zones via `TimeZoneInfo.FindSystemTimeZoneById` for every safety-sensitive local-day decision and fails closed, so the runtime image MUST carry tzdata + ICU (the Ubuntu 24.04 (Noble) `aspnet:10.0` base does; never an Alpine/chiseled base without tzdata, and never `InvariantGlobalization=true`). `Program.cs` asserts a representative IANA canary and the configured `Seed:TimeZoneId` resolve at boot (`TimeZoneAvailability.EnsureResolvable`) — a bad image or a typo'd zone fails the boot loudly instead of surfacing later as a per-request `FarmTimeZoneException`.\n- Migrate command + prod migration split (#263): `dotnet Cluckwork.Api.dll migrate` is a third run-then-exit CLI verb (same shape as `seed`) that applies EF migrations then exits — the pre-deploy-job entrypoint. In Production (`appsettings.Production.json`, loaded because the container leaves `ASPNETCORE_ENVIRONMENT` unset → Production; setting it to Development silently re-enables boot-migration) `Database:MigrateOnStartup=false`, so the request-serving process never runs schema DDL. The actual guarantee is ordering** — migrate runs before serve: `deploy/docker-compose.yml` runs a one-shot `migrate` service first and `app` waits on `service_completed_successfully` (any other orchestrator runs the `migrate` job as a pre-deploy step). `DatabaseReadyHealthCheck` is the backstop: `/health/ready` returns 503 while any migration is pending, so an orchestrator's readiness gate won't route traffic to a stale schema; and `DatabaseSeeder` logs + skips (never crashes) if it boots before the schema exists. This is the app-side of #263's privilege separation. The remaining host-specific deploy step: create a least-privilege runtime role (`GRANT USAGE ON SCHEMA public` + DML/sequence privileges, no DDL; plus `ALTER DEFAULT PRIVILEGES` for the migrator role so objects future migrations create are auto-granted to the runtime role) and point the migrate job at a separate owner/migrator credential. This PR does not close #263 on its own — it references it; the role split closes it.\n- Proxy-trust boot guard (#260): behind a reverse proxy/edge, HSTS (#144) and the per-IP login limiter (#143) only work if the app trusts the proxy's `X-Forwarded-`, which it does only for networks in `RateLimiting:TrustedProxies`. An empty list in Production fails the boot (a serving-process guard placed after* the CLI dispatch, so `migrate`/`seed`/`recover-admin` are unaffected) rather than silently running with inert HSTS + a one-bucket limiter. Opt out with `RateLimiting:AllowNoTrustedProxies=true` only for a rare direct-TLS deploy with no fronting proxy. The concrete edge CIDR is deploy config (in the separate deployment/ops repo).\n- Production Postgres TLS floor (#261/#262): `ConnectionStrings:Default` accepts libpq URI form (`postgresql://…`, translated to Npgsql key-value; unknown params skip-with-warning) as well as key-value. In Production the effective `sslmode` is validated once at boot as a fail-closed allow-list: `VerifyCA`/`VerifyFull` silent, `Require` warns (prefer VerifyFull), and everything else — `Disable`/`Allow`/`Prefer`, unset (Npgsql defaults to `Prefer`), or any undefined `SslMode` — fails the boot. Never auto-injected. `Database:AllowInsecureConnection=true` is the explicit opt-out for the co-located plaintext compose stack (set on both `app` and `migrate`; a real deploy never sets it). The `VerifyFull` CA + per-host `sslmode` are deploy config (in the separate deployment/ops repo). Integration tests opt out of this and the #260 guard in `CluckworkWebApplicationFactory` (plaintext Testcontainers, no proxy) — a Production-env test that skips those opt-outs will fail the boot.\n- Design-time migration connection fail-closed (#318): `AppDbContextDesignTimeFactory` (used by `dotnet ef migrations add`/`database update`, never by the `migrate` verb, which uses the built host's own config) has no default connection — an unset/blank `CLUCKWORK_MIGRATIONS_CONNECTION` throws immediately, naming the variable, rather than falling back to a predictable `Host=localhost;...;Username=postgres;Password=postgres`. Every target is held to the same allow-list TLS floor as a Production boot (#261/#262, reused via `PostgresConnectionString.NormalizeAndValidate` — no second validator), except an explicitly acknowledged loopback development target: `CLUCKWORK_MIGRATIONS_ALLOW_INSECURE_LOOPBACK=true` permits plaintext, but only when the connection's host is `localhost`/`127.0.0.1`/`::1` (checked via `IPAddress.IsLoopback`) — set against any other host, it fails rather than silently widening scope.\n- Container image hardening (#267): the runtime stage runs non-root (`USER $APP_UID`, uid 1654 — the base image's built-in `app` account); all three base images are digest-pinned (`@sha256:…`, kept current by Dependabot's `docker` ecosystem); a CI job builds the image and Trivy fails the build on a fixable HIGH/CRITICAL. `aquasecurity/trivy-action` is SHA-pinned — the action was compromised in the 2026-03 supply-chain incident, so pin the immutable commit, not the re-pointable tag (this is the standing rule for third-party actions). Keep the full glibc base (tzdata + ICU per #264); never chiseled/Alpine.\n- Container health probe (#266): the runtime image and the compose `app` service carry a `HEALTHCHECK` that runs `dotnet Cluckwork.Api.dll healthcheck` — a fourth run-then-exit CLI verb, but **dispatched before host build (`Program.cs`, `args is [HealthCheckCliCommand.Verb, ..]`), not via `CliDispatcher`: unlike `migrate`/`seed`/`recover-admin` — which operate on the built host — this one needs no host/DI/DB/config, so a 30s probe must not re-run the whole app startup or re-log boot warnings on every tick. The hardened image ships no curl/wget (#267), so the probe is in-process: it GETs `/health/ready` over loopback (port derived from `ASPNETCORE_URLS`, default `8080`) and exits `0` on a 2xx, `1` on any other status or an unreachable server (refused/timeout) — never a false green. So an instance whose `/health/ready` is 503 (DB down, migrations pending per #263) reports unhealthy and compose/an orchestrator stops routing to it. Its `ProbeAsync`/`DefaultReadyUrl` are unit-tested directly (no Docker). The CI `image` job (#267) now also boots the built image against a throwaway Postgres and asserts `/health/ready` goes green + the verb exits `0`, so an unbootable image fails CI instead of at deploy time — this is the app-side of #266. Deploy-side (the host's readiness path, wait-for-CI gate, post-deploy smoke) lives in the separate deployment/ops repo.\n- Nullable enabled, no unused usings (both are build-breaking).\n\n## Secrets — never commit\n\n- `deploy/.env` is gitignored (real values). `deploy/.env.example` holds placeholders only.\n- Local API debug config uses `dotnet user-secrets` (keyed by `UserSecretsId` in `Cluckwork.Api.csproj`).\n- No hardcoded passwords/keys in source — GitGuardian scans PRs. Generate test credentials at runtime.\n\n## Host-agnostic repo (deployment boundary)\n\nThis repo is host-portable — it must build and run against any host without\ncarrying provider-specific config. The app reads every environment specific from\nconfig/env (connection string, `RateLimiting:TrustedProxies`, `Seed:TimeZoneId`,\nPostgres `sslmode`, …) and never names or branches on a hosting provider.\n\n- Stays here** (portable operational contract): the Dockerfile (incl. its\n `HEALTHCHECK`), `deploy/` compose as a local/reference stack, health probes\n (`/health/live`, `/health/ready`), the `migrate` / `seed` / `recover-admin` /\n `healthcheck` verbs, `.env.example`, and docs that state requirements (\"needs tzdata + ICU\",\n \"needs a trusted-proxy list\", \"needs TLS to Postgres\", \"a fronting CDN must\n respect origin cache headers\").\n- Does NOT belong here (goes to a separate deployment/ops repo):\n provider deploy manifests (`railway.json`, `fly.toml`), IaC (Terraform/Pulumi),\n CDN / DNS / edge config, secret-store wiring, provider-named runbooks, and the\n concrete environment values (proxy CIDRs, CA bundles, connection URLs).\n\nReviewers: treat a hardcoded provider name in code, config, or a committed doc\nlike a missing test — flag it. Naming a provider as a passing example in prose\nis tolerable only when no portable phrasing works; prefer the neutral term.\n\n## Pre-commit hook (opt-in)\n\n`git config core.hooksPath .githooks` enables a ~2s pre-commit hook: unit tests\n(domain + application) when `.cs`/`.csproj`/`.sln` files are staged, `npm run typecheck` when\n`web/` files are staged. Integration tests are deliberately excluded (Docker,\nslow) — CI is the authority. Skip once with `--no-verify`.\n\n## CI security gates (#146)\n\nCI fails a PR when a dependency carries a known high+ advisory:\n\n- NuGet — `dotnet list package --vulnerable` (parsed; the CLI always exits 0).\n- npm, production deps — `npm audit --omit=dev`. Dev-only advisories (vite,\n vitest, eslint…) are advisory only — logged, never blocking, since they\n don't ship to users. Promote to blocking, or bump the dep, when one appears.\n- Dependency review — PR-only; fails when the diff introduces a vulnerable\n dep. Needs the repo's Dependency graph (Settings → Advanced Security); while\n it's off the step self-skips with a loud CI warning and activates automatically\n once enabled.\n- CodeQL (`.github/workflows/codeql.yml`) — SAST, advisory (reports to the\n Security tab; not a required check). To gate on it, enable code-scanning merge\n protection in a branch ruleset (\"Require code scanning results\").\n- Scheduled audit (`.github/workflows/security-audit.yml`) — the same two\n audit gates on a weekly cron against `main`, plus `workflow_dispatch`. The CI\n gates only fire on a PR or a push, so without this an advisory published\n against a dependency nobody is touching goes unnoticed until the next PR.\n\nNuGet lock files. `Directory.Build.props` sets `RestorePackagesWithLockFile`,\nso every project has a committed `packages.lock.json` and CI restores with\n`--locked-mode` — restores are deterministic, and a dependency can't float to\na different resolved version between a green local run and CI. When you add or\nbump a package, run `dotnet restore` and commit the changed lock files in the\nsame commit — otherwise CI fails the restore with `NU1004`.\n\nHow the graph learns about transitive NuGet. Not from the lock files. GitHub\nparses `.csproj`/`.vbproj`/`.nuspec`/`.fsproj`/`packages.config` for NuGet, never\n`packages.lock.json`, and doesn't derive NuGet transitives statically — on\nmanifests alone it sees 20 direct `PackageReference`s out of ~80 resolved, leaving\ndependency-review blind to a transitively-introduced vulnerable package.\n`.github/workflows/dependency-submission.yml` closes that: on a push to `main`\ntouching the dependency set, Microsoft's component-detection reads the restore\noutput and submits the resolved graph via the Dependency Submission API. npm needs\nnone of this — the graph reads `web/package-lock.json` and already has the full tree.\n\n### Dependabot NuGet PRs: automatic lock-file healing\n\nDependabot bumps a package in one project and regenerates only that project's\n`packages.lock.json`; every downstream project in the reference chain then fails\nCI's `--locked-mode` restore with NU1004. The `.github/workflows/dependabot-lockfix.yml`\nworkflow heals this automatically: after CI completes on a `dependabot/nuget/`\nPR, it re-runs `dotnet restore Cluckwork.sln --force-evaluate` (in a no-credential\njob), then commits and pushes the refreshed lock files (in a separate job that\nruns no project code and holds a short-lived GitHub App token). The App-token push\nre-triggers CI, which then goes green. See\n`docs/superpowers/specs/2026-07-25-dependabot-lockfix-design.md` for the security\nmodel.\n\nOne-time setup (required for the push to work): create a GitHub App with\nRepository → Contents: Read and write, install it on this repo, and add the repo\nActions secrets `LOCKFIX_APP_ID` and `LOCKFIX_APP_PRIVATE_KEY`. Until both exist\nthe workflow fails closed (no push); nothing else breaks.\n\nDependabot** (`.github/dependabot.yml`) covers the other half: the gates\nenforce (a vulnerable dep fails the build), Dependabot proposes (it opens the\nbump PR, and — with Dependabot alerts enabled in repo settings — flags a new\nadvisory the day it publishes). Neither replaces the other. Weekly grouped\nversion updates for `github-actions`, `npm` (`web/`) and `nuget`; security fixes\narrive ungrouped so they can be read and merged on their own.\n\nBoth audit gates run through `.github/scripts/vuln-gate.mjs` (self-tested with\n`node --test`), which shares one escape hatch: `.github/security-exceptions.json`.\nAdd a `{ id: GHSA-…, ecosystem, reason, expires }` entry to mute one advisory\nuntil a required calendar date — past it, the advisory blocks again and CI\nwarns the entry is stale. The gate fails closed: a malformed report (e.g. an\n`npm audit` registry error), an unknown severity, or a malformed exception\n(missing scope/reason, impossible date, non-GHSA id) all block rather than pass.\nThe `id` must be an exact GHSA, so an advisory GitHub only knows by CVE can't be\nexcepted — bump or pin the package instead. Reach for an exception only when\nthere's no fixed version to move to; prefer bumping or pinning a patched\ntransitive version (npm `overrides` / direct NuGet reference) first. The same\nfile feeds dependency-review's allowlist, so the gates never disagree.\n\n### Pin third-party Actions to a commit SHA\n\nThird-party GitHub Actions (anything not `actions/` or `github/`) are pinned\nto a full commit SHA with a trailing `# vX.Y.Z` comment — never a mutable\nversion tag. A compromised action can retarget a \"trusted\" tag to malicious code\nthat exfiltrates CI secrets; both the 2026-03 `aquasecurity/trivy-action` and the\n2025-03 `tj-actions/changed-files` incidents did exactly that. Dependabot's\n`github-actions` ecosystem reads the trailing comment and bumps both the SHA\nand the comment on a new release, so a SHA pin stays current. GitHub-owned\n`actions/` and `github/` may keep major-version tags (GitHub-controlled, lower\nrisk). Currently SHA-pinned: `actions/create-github-app-token`,\n`aquasecurity/trivy-action`, and\n`advanced-security/component-detection-dependency-submission-action`.\n\n## Git / PR workflow\n\n- `origin` = GitHub (`github.com/mforce/cluckwork`); `gitea` = backup mirror. Use `gh` for PRs.\n- `main` is protected — branch, push, open a PR; don't commit to `main`.\n- Branch names: `feat/…`, `chore/…`, `spec/…`. PRs squash-merge.\n- Only commit/push when the human asks.\n- Keep phase epics in sync: when filing a slice issue, add it to the phase epic's checklist (epic #14 = Phase 1.1, #15 = Phase 1.5) with its issue number; when its PR merges, check it off. Milestone assignment alone is not enough — the epics are how work is navigated.\n- Keep documentation in sync (owner directive, 2026-07-17): every PR that adds or changes user-visible behavior updates, in the same PR: (1) `specs/product/GLOSSARY.md` when a concept appears or changes meaning, and (2) the SPA Help page + in-app glossary (once #71 lands). Treat a missing doc update like a missing test — reviewers should flag it.\n\n## Phase context\n\nPhase 1.0 (MVP) is shipped — epic #13 closed. The egg loop runs end-to-end from the SPA: daily entry (by grade) → submit → egg lots → stock → customer → sales order → FIFO allocation → stock decremented. Single-farm login (multi-tenant infra present but dormant), customers without payments, draft orders cancellable/editable.\n\nDomain terms (flock lifecycle, daily entry states, egg lots, grades, culls, FIFO allocation) are defined in `specs/product/GLOSSARY.md` — read it before renaming or modeling anything.\n\nCurrent phase: Phase 1.1 (epic #14, `specs/product/specs.md` §6) — RBAC UI, product catalog / egg-grade management, inventory movement ledger, feed/water/mortality, expenses, payments, dashboard, reports, audit UI, exports, i18n infrastructure (#45; English-only, translations land in 1.5). Known deferred item with an issue: farm-local timezone boundaries (#35). Work is tracked as GitHub issues (epics + slices).\n\n## graphify\n\nThis project has a knowledge graph at graphify-out/ with god nodes, community structure, and cross-file relationships.\n\nWhen the user types `/graphify`, use the installed graphify skill or instructions before doing anything else.\n\nRules:\n- For codebase questions, first run `graphify query \"\"` when graphify-out/graph.json exists. Use `graphify path \"\" \"\"` for relationships and `graphify explain \"\"` for focused concepts. These return a scoped subgraph, usually much smaller than GRAPH_REPORT.md or raw grep output.\n- Dirty graphify-out/ files are expected after hooks or incremental updates; dirty graph files are not a reason to skip graphify. Only skip graphify if the task is about stale or incorrect graph output, or the user explicitly says not to use it.\n- If graphify-out/wiki/index.md exists, use it for broad navigation instead of raw source browsing.\n- Read graphify-out/GRAPH_REPORT.md only for broad architecture review or when query/path/explain do not surface enough context.\n- After modifying code, run `graphify update .` to keep the graph current (AST-only, no API cost).\n\n",{"_407":682,"_386":387,"_409":393},{"_410":683,"_412":-5,"_45":-5,"_414":684,"_416":-5,"_99":685,"_95":418},[686],{"_419":393},"developer",{"_49":687,"_95":442},"Do not spawn sub-agents unless the user or applicable AGENTS.md/skill instructions explicitly ask for sub-agents, delegation, or parallel agent work.",{"_407":689,"_386":387,"_409":393},{"_410":690,"_412":-5,"_45":-5,"_414":691,"_416":-5,"_99":685,"_95":418},[692],{"_419":393},{"_49":693,"_95":442},"You are `/root`, the primary agent in a team of agents collaborating to fulfill the user's goals.\n\nAt the start of your turn, you are the active agent.\nYou can spawn sub-agents to handle subtasks, and those sub-agents can spawn their own sub-agents.\nAll agents in the team, including the agents that you can assign tasks to, are equally intelligent and capable, and have access to the same set of tools.\n\nYou can use `spawn_agent` to create a new agent, `followup_task` to give an existing agent a new task and trigger a turn, and `send_message` to pass a message to a running agent without triggering a turn.\nChild agents can also spawn their own sub-agents.\nYou can decide how much context you want to propagate to your sub-agents with the `fork_turns` parameter.\n\nYou will receive messages in the analysis channel in the form:\n```\nMessage Type: MESSAGE | FINAL_ANSWER\nTask name: \nSender: \nPayload:\n\n```\nThey may be addressed as to=/root\n\nNote that collaboration tools cannot be called from inside `functions.exec`. Call `spawn_agent`, `send_message`, `followup_task`, `wait_agent`, `interrupt_agent`, and `list_agents` only as direct tool calls using the recipient shown in their tool definitions, such as `to=functions.collaboration.spawn_agent`, since they are intentionally absent from the `functions.exec` `tools.` namespace. Available tools in `functions.exec` are explicitly described with a `tools` namespace in the developer message.\n\nAll agents share the same directory. In detail:\n- All agents have access to the same container and filesystem as you.\n- All agents use the same current working directory.\n- As a result, edits made by one agent are immediately visible to all other agents.\n\nThere are 4 available concurrency slots, meaning that up to 4 agents can be active at once, including you.",{"_407":695,"_386":387,"_409":393},{"_410":696,"_412":-5,"_45":-5,"_414":697,"_416":-5,"_99":685,"_95":418},[698,699],{"_419":393},{"_49":701,"_95":442},{"_49":700,"_95":442},"\n## Skills\nA skill is a set of instructions provided through a `SKILL.md` source. Below is the list of skills that can be used. Each entry includes a name, description, and source locator. `file` locators are on the host filesystem, `environment resource` locators are owned by an execution environment, `orchestrator resource` locators are opaque non-filesystem resources, and `custom resource` locators use their provider's access mechanism.\n### Available skills\n- imagegen: Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output should be a bitmap asset rather than repo-native code or vector. Do not use when the task is better handled by editing existing SVG/vector/code-native assets, extending an established icon or logo system, or building the visual directly in HTML/CSS/canvas. (file: /opt/codex/skills/.system/imagegen/SKILL.md)\n- openai-docs: Use when the user asks how to build with OpenAI products or APIs, asks about Codex itself or choosing Codex surfaces, needs up-to-date official documentation with citations, help choosing the latest model for a use case, or model upgrade and prompt-upgrade guidance; use OpenAI docs MCP tools for non-Codex docs questions, use the Codex manual helper first for broad Codex self-knowledge, and restrict fallback browsing to official OpenAI domains. (file: /opt/codex/skills/.system/openai-docs/SKILL.md)\n- plugin-creator: Create and scaffold plugin directories for Codex with a required `.codex-plugin/plugin.json`, optional plugin folders/files, valid manifest defaults, and personal-marketplace entries by default. Use when Codex needs to create a new personal plugin, add optional plugin structure, generate or update marketplace entries for plugin ordering and availability metadata, or update an existing local plugin during development with the CLI-driven cachebuster and reinstall flow. (file: /opt/codex/skills/.system/plugin-creator/SKILL.md)\n- skill-creator: Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Codex's capabilities with specialized knowledge, workflows, or tool integrations. (file: /opt/codex/skills/.system/skill-creator/SKILL.md)\n- skill-installer: Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos). (file: /opt/codex/skills/.system/skill-installer/SKILL.md)\n","\nFilesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is enabled.\nApproval policy is currently never. Do not provide the `sandbox_permissions` for any reason, commands will be rejected.\n","turn/started",{"_386":387,"_90":704},{"_106":-5,"_45":393,"_394":705,"_396":397,"_398":399,"_400":706},[],"inProgress",{"_400":708,"_386":387},{"_709":710,"_95":711},"activeFlags",[],"active","thread/started",{"_714":715},"thread",{"_716":-5,"_717":-5,"_718":719,"_720":399,"_452":453,"_721":18,"_722":-5,"_723":-5,"_724":-5,"_725":726,"_45":387,"_727":728,"_184":-5,"_729":-5,"_164":730,"_731":202,"_732":399,"_733":387,"_458":734,"_400":735,"_736":-5,"_80":737,"_738":399},"agentNickname","agentRole","cliVersion","0.144.0-alpha.4","createdAt","ephemeral","extra","forkedFromId","gitInfo","historyMode","legacy","modelProvider","openai","parentThreadId","/opt/codex/sessions/2026/08/01/rollout-2026-08-01T17-38-01-019fbe67-7f84-71f1-a9c4-205a71f47c91.jsonl","preview","recencyAt","sessionId","vscode",{"_95":404},"threadSource",[],"updatedAt",[],"messages",[742],{"_45":743,"_744":745,"_746":747,"_748":747,"_410":749,"_400":750,"_412":-5,"_751":35,"_752":753,"_754":755,"_756":-5},"61093c4b-2549-445b-be1c-d49224195be3","author",{"_99":329,"_184":-5,"_752":765},"create_time",1785605880.929357,"update_time",{"_761":49,"_762":763},"finished_successfully","weight","metadata",{"_757":758},"recipient","all","channel","l1239dk1",{"_759":760},"inline_comments",[],"content_type","parts",[764],"@codex the P1 is addressed in bdfe265 — see the thread reply on discussion_r3696173627 for detail and verification.\nfeat(api,web): require step-up authentication for privileged user administration (#308)\n\nCloses #308. `priority:critical` — the last of the four issues blocking public deployment.\n\n## Threat\n\nA stolen but still-valid Owner access token (~15 min TTL, no server-side denylist) could create another Owner or reset an existing Owner's password. That turns a short-lived token theft into durable account control — the thief no longer needs the stolen token.\n\n## Mechanism (owner-decided: current-password re-confirmation)\n\n`POST /auth/step-up` re-confirms the caller's current password and mints a short-lived grant (5 min, `JwtOptions.StepUpGrantMinutes`): single-use, bound to account + user, with a distinct audience (`cluckwork-step-up`, never sourced from config) so it can't be used as a normal access token. Carried in `X-Cluckwork-Step-Up` — never the body, never as a Bearer token.\n\nInvalidated by:\n- security-stamp change — any password change or reset rotates it, so the grant dies with the credential it proved\n- logout — `IdentityProvider.RevokeRefreshTokenAsync` records the user's logout instant; grants issued at or before it are rejected\n\nEvery rejection reason collapses to one code (`Identity.StepUpRequired`, 403) so failures don't enumerate.\n\n## What is gated — deliberately narrow\n\nExactly two operations: creating a user with Role=Owner, and resetting the password of a user who currently holds Owner. These are the only two that can mint a new Owner or hand over an existing one.\n\nEverything else — Worker, Manager, Sales, ReadOnly, and every other admin action — is untouched, which is the \"accidental blanket prompt\" the issue explicitly warns against. Two tests pin the negative* (`CreateWorker_NeedsNoStepUp…`, `ResetWorkersPassword_NeedsNoStepUp…`), and two of the mutation checks were deliberately over-gating mutations to catch a creeping blanket prompt.\n\nBreak-glass `recover-admin` (#265) is unaffected: the gate lives in the handlers, not `IIdentityProvider`, so the CLI verb and the seeders bypass it by construction.\n\n## ⚠️ This adds a third blocker to running more than one replica\n\nThe registry backing single-use and logout-revocation is in-process (`InMemoryStepUpGrantRegistry`), matching the existing in-memory per-IP rate limiter (#143). No new infrastructure, no schema change.\n\nThat is fine today — the deployment is single-instance — but it means #308 joins #271 and #307 as a reason not to scale out. With two replicas, a grant consumed on one is still unused on the other, and a logout recorded on one doesn't revoke grants on the other. It also fails open across a process restart, the same way the rate limiter's buckets do.\n\nWorth flagging loudly because #307 is in flight right now specifically to unblock multi-replica writes — clearing it would leave this as a quiet remaining hazard. Filed as a follow-up rather than solved here, since a shared store is exactly the \"new infrastructure\" this mechanism was chosen to avoid.\n\n## Tests\n\n16 backend (`StepUpAuthTests`): accept, plus missing / expired / replayed / wrong-account / revoked-by-stamp / revoked-by-logout, audience isolation, non-enumeration. 10 SPA (`UsersPage.test.tsx`): field visibility, success, never-stores-the-password, cancel, server rejection, expiry, non-Owner bypass, Owner reset, cancel-on-reset, logout-clears. Plus 6 in `client.test.ts`.\n\nMutation-checked across 13 production guards, each reverted → confirmed RED → restored → confirmed GREEN.\n\nOne honest finding from that pass: the wrong-account case is protected redundantly by both the account-claim check and the per-user security-stamp comparison — neutralizing either alone left the test green; only removing both together turned it red. That's defense in depth rather than a test gap, but it means a single future regression in either guard would not be caught by that test alone.\n\n## Process deviation, disclosed\n\nProduction code and tests were written together rather than strictly test-first, given the scope. The 13-guard mutation pass is the substantive guarantee the red-first rule exists to provide, and it was run in full — but it is a deviation and I'd rather state it than let the test count imply otherwise.\n\n## Verification\n\n- `dotnet test Cluckwork.sln` — 1035/1035, 0 warnings\n- `npm run typecheck` clean, `npx vitest run` — 1233/1233, `npm run build` succeeds\n- `npm run test:coverage` — global 91.03/88.02/82.32/78.34 against floors 90/87/81/78; `client.ts` 96.51/89.15/98.02/100 against 94/85/95/100. Floors unchanged — every actual moved up, and the config comment records the re-measurement rather than re-baselining.\n\n## Docs\n\n`GLOSSARY.md` and the SPA Help page both updated, with es/tl shipped inline per the translate-now policy.\n\nNo migration — the schema lane belongs to #270 → #307 → #283.\n\n#### ⚠️ GitGuardian has uncovered 2 secrets following the scan of your pull request.\n\nPlease consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.\n\n\n\n
\n
🔎 Detected hardcoded secrets in your pull request
\n
\n\n| GitGuardian id | GitGuardian status | Secret | Commit | Filename | |\n| -------------- | ------------------ | ------------------------------ | ---------------- | --------------- | -------------------- |\n| [35146328](https://dashboard.gitguardian.com/workspace/16690/incidents/35146328?occurrence=286461060) | Triggered | Generic Password | d3e4d5447c5ce648b7b93c053f7829de4d9ea476 | web/src/api/client.test.ts | [View secret](https://github.com/mforce/cluckwork/commit/d3e4d5447c5ce648b7b93c053f7829de4d9ea476#diff-99f333248f6a93adfaddbb96af70717586072674c735fafaaa8234d252bb31adR687) |\n| [35626202](https://dashboard.gitguardian.com/workspace/16690/incidents/35626202?occurrence=286461061) | Triggered | Generic Password | aace4feefbd1469b879b0e4cfc1b69c265e62977 | src/Cluckwork.Infrastructure/Identity/AccountLockout.cs | [View secret](https://github.com/mforce/cluckwork/commit/aace4feefbd1469b879b0e4cfc1b69c265e62977#diff-caf875722ff689aea1e93112afcc4dd43963549822a28d95e1837a7a82e07124R10) |\n\n\n\n
\n\n
\n
🛠 Guidelines to remediate hardcoded secrets
\n
\n\n1. Understand the implications of revoking this secret by investigating where it is used in your code.\n2. Replace and store your secrets safely. [Learn here](https://blog.gitguardian.com/secrets-api-management?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) the best practices.\n3. Revoke and [rotate these secrets](https://docs.gitguardian.com/secrets-detection/secrets-detection-engine/detectors/generics/generic_password#revoke-the-secret?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment).\n4. If possible, [rewrite git history](https://blog.gitguardian.com/rewriting-git-history-cheatsheet?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment). Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.\n\nTo avoid such incidents in the future consider\n\n- following these [best practices](https://blog.gitguardian.com/secrets-api-management/?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) for managing and storing secrets including API keys and other credentials\n- install [secret detection on pre-commit](https://docs.gitguardian.com/ggshield-docs/integrations/git-hooks/pre-commit?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) to catch secret before it leaves your machine and ease remediation.\n\n\n
\n\n---\n\n^{🦉 [GitGuardian](https://dashboard.gitguardian.com/auth/login/?utm_medium=checkruns&utm_source=github&utm_campaign=cr1) detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}\n_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Compare logout times at JWT precision\n\nWhen a user logs out, signs back in, and obtains a step-up grant before the UTC second rolls over, the JWT's `ValidFrom` has whole-second precision while `RecordLogout` retains subsecond ticks. The new grant therefore appears to have been issued before the prior logout and is permanently rejected with 403, forcing the user to wait and re-enter their password for another grant. Normalize both timestamps to the same precision or carry a higher-precision issuance value.\n\nUseful? React with 👍 / 👎.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `b84ef7da62`\n \n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\nThe lockout finding is correct and was the right call to block on. Fixed.\n\nYou're right that this is a second password-verification oracle, and that guarding only login leaves the per-IP limiter alone on the surface that matters most — which a distributed attacker rotating source IPs simply walks around. #128 exists because those two controls are meant to work together.\n\n`/auth/step-up` now checks `IsLockedOutAsync` first (same non-enumerating denial, still paying PBKDF2 so a locked account isn't distinguishable from a wrong password), records `AccessFailedAsync` on failure, and resets the count on success.\n\nThe lockout logic moved into a shared `AccountLockout` helper rather than being copied into the second call site. A duplicated retry loop is a second thing to forget when a third oracle appears — which is precisely how this one got missed.\n\nYour meta-point is the most useful thing in this review, and I've written it into the commit message so it survives: mutation testing reverts guards that exist and is structurally blind to a guard that was never written. Thirteen mutants all went red and none of them could have caught this. So the new coverage is positive tests rather than another mutant — locked out after the threshold, still working below it, failures cleared on success — with the enforcement half mutation-checked to confirm it reproduces your exploit exactly (six wrong then correct → 200 without the guard, refused with it).\n\nWorth noting the guard is load-bearing in a second way: removing it entirely doesn't even compile, because `db` becomes unread and warnings are errors here.\n\nMinor (logout epoch) — also fixed. You were right that `RevokeRefreshTokenAsync` only recorded the epoch when the presented row was still unrevoked, so a cookie already superseded by a background rotation recorded nothing and left a grant alive for its remaining lifetime. The lookup no longer filters on `RevokedAt` — identifying the user is what matters, not whether that particular row is live. A genuinely unknown token still records nothing.\n\nFull suite 1038/1038, 0 warnings; frontend 1233/1233, typecheck clean.\n\n@codex your feedback has been address please check\nTo use Codex here, [create an environment for this repo](https://chatgpt.com/codex/cloud/settings/environments).\n@codex your issues have been addressed can you please check?\n_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Return a non-session status for a wrong step-up password\n\nWhen the SPA submits an incorrect current password, this 401 is not merely displayed: `stepUp()` uses `apiPost()`, and `apiFetch()` treats every 401 as an expired access token, refreshes the session, and retries the same password. With a valid refresh cookie, one user attempt therefore records two failed accesses, causing the five-attempt account lockout to trigger after only three submissions and unnecessarily rotating the refresh token; if refresh is unavailable, it can instead sign the user out. Return a non-401 credential-rejection status, as the change-password flow does, or explicitly suppress transparent refresh for this endpoint.\n\nUseful? React with 👍 / 👎.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `f12eeb9677`\n \n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\nFixed in `0a18685`. The finding is real and the diagnosis was exact: `nbf` is a NumericDate, so `jwt.ValidFrom` is floored to the second while `RecordLogout` keeps ticks, and a grant minted at `:00.800` after a `:00.500` logout presented as `:00.000` and was refused.\n\nBoth suggested remedies are not equivalent — normalizing precision does not work here. Flooring the stored logout time to the second leaves both values at `:00.000`, and the comparison is `<=`, so the fresh grant is still rejected. Reaching for strict `<` to compensate would be a security regression: it would accept a grant genuinely minted earlier in the same second as the logout, which is precisely what this check exists to stop. So this takes the second option — carry a higher-precision issuance value.\n\n`IssueAsync` now mints `stepup_iat_ticks` (`now.UtcTicks`, invariant culture) inside the signed grant; `ValidateAsync` reads that instead of `jwt.ValidFrom`. Standard `nbf`/`exp` are untouched, so ordinary JWT validation is unchanged.\n\nThe comparison in `InMemoryStepUpGrantRegistry` is deliberately left as `issuedAt <= loggedOutAt`. Only its input got more precise. A grant minted at `:00.200` now presents `:00.200` rather than `:00.000`, so it is still `<=` a `:00.500` logout and still revoked. The fix widens nothing.\n\nFail-closed: a missing, non-numeric or out-of-range claim collapses into the same `DeniedError` as every other rejection — no fallback to the floored `nbf`. Non-enumeration, audience isolation, single-use `jti`, stamp revocation and account/user binding are unchanged.\n\nOne thing worth recording, because it nearly shipped a hole. The obvious two-test pair — \"grant after logout, same second, accepted\" and \"grant before logout, same second, rejected\" — does not cover this. The second test passes under strict `<` as well (`0.2 < 0.5` either way), so it cannot detect the regression. A third test was needed, placing the grant and the logout at the exact same instant — the only tick where `<=` and `<` disagree.\n\nVerification (mutants re-run independently, not just taken from the implementation report):\n\n| Mutant | Result |\n|---|---|\n| revert to `jwt.ValidFrom` | RED — `CreateOwner_StepUpIssuedAfterLogoutInTheSameSecond_IsAccepted` |\n| loosen to `issuedAt < loggedOutAt` | RED — `CreateOwner_StepUpIssuedAtTheExactLogoutInstant_IsStillRevoked` |\n| disable the logout check | RED — 3 tests, incl. the pre-existing `CreateOwner_StepUpRevokedByLogout_Is403` |\n| drop the fail-closed parse guard | does not compile — definite assignment makes a silent fail-open structurally impossible |\n\n`StepUpAuthTests` 22/22, full integration suite 644 passed / 0 failed, build clean at 0 warnings.\n@codex the P2 (compare logout times at JWT precision) is addressed in `0a18685` — the grant now carries a tick-precision `stepup_iat_ticks` claim and the registry comparison stays `<=`, so the same-second-before-logout rejection is preserved. Reasoning and mutation results are in the reply on the original thread. Ready for your re-check.\nCodex Review: Didn't find any major issues. Already looking forward to the next diff.\n\nReviewed commit: `0a186854d3`\n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\nFixed in `a5214ce`. Confirmed real, and it was the most consequential finding on this PR — because the endpoint it breaks is the one this same PR just hardened.\n\n`IssueAsync` returns `Error.Validation(\"Users.CurrentPasswordIncorrect\", …)` — the identical error value `ChangePassword` returns as a 400. The endpoint was overriding a validation error into a session-expiry status, and `apiFetch` treats every 401 as a stale access token: refresh, then replay the same wrong password. So one typed password cost two failed accesses, cutting the #128 five-attempt lockout this PR introduced down to three, and burning a refresh-token rotation each time.\n\nNow `StatusCodes.Status400BadRequest`, matching `ChangePassword`. Deliberately not 403 — that stays reserved for `StepUpErrorCodes.Required`, the non-enumerating grant-validation failure on the gated endpoints, which is a different thing and is untouched. The genuinely-unauthenticated branch (`!currentUser.IsResolved || !tenant.IsResolved`) stays 401, because that one really is a session problem.\n\nThe damage is invisible to a plain `HttpClient` — it issues one request per attempt whatever the status — so a status-code assertion alone would not have caught a regression that reinstates the retry. `StepUpAuthTests` gained a `SpaLikeClient` that reproduces `apiFetch` exactly (refresh-and-replay on a 401, and only on a 401), with counts read off the user row via `UserManager`, not inferred from responses:\n\n| | fixed (400) | mutant (401) |\n|---|---|---|\n| 1 user attempt | 1 failed access | 2 |\n| after 4 attempts | count 4, not locked | count 0, locked — Identity zeroes the counter on lockout; it had already tripped at attempt 3 |\n| refresh token after 4 attempts | unrotated | rotated 4× |\n\nMutation results, re-run independently of the implementation. Reverting 400 → 401 turns three tests red:\n\n- `StepUp_WrongCurrentPassword_IsACredentialRejection_NotASessionExpiry`\n- `StepUp_WrongPassword_RecordsExactlyOneFailedAccessPerUserAttempt` — fails on the count (`Expected: 1 / Actual: 2`), asserted before the status on purpose so the mutant fails on the damage rather than its cause\n- `StepUp_LockoutTripsOnTheFifthUserAttempt_NotTheThird` (`Expected: 4 / Actual: 0`)\n\nSPA side: flipping the mocked reply to 401 turns `issues exactly one request for a rejected password` red (`expected 1 times, but got 2 times`). A paired test asserts a real 401 still refreshes and retries, so the fix doesn't quietly disable transparent refresh everywhere. No green mutants.\n\n`client.ts` took a contract note only — no behaviour change; `UsersPage` renders `ApiError.message` either way, so the wrong-password text a user sees is unchanged.\n\nBuild clean at 0 warnings. Integration 646 passed / 0 failed (StepUpAuthTests 24/24); Domain 283, Application 114; `npm test` 1235 passed / 66 files; typecheck clean; coverage gate exit 0 with no floor lowered.\n@codex the P2 (non-session status for a wrong step-up password) is addressed in `a5214ce` — now 400, matching `ChangePassword`, which returns the same `Users.CurrentPasswordIncorrect` error value. 403 stays reserved for `StepUpErrorCodes.Required` and the genuinely-unauthenticated branch stays 401.\n\nYour read on the impact was right and it was the sharpest finding on this PR: the double-count silently cut the #128 lockout this same PR introduced from five attempts to three. Tests now assert the failed-access count directly off the user row through an `apiFetch`-faithful client, since a plain `HttpClient` issues one request per attempt regardless of status and would not catch a regression. Full details and mutation results are in the reply on the thread.\n\nReady for your re-check.\n_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Revoke the access-token user's grant on logout\n\nWhen two tabs hold access tokens for different users, the refresh cookie is shared while `tokenStore.ts` keeps each access token in that tab's memory; logging out from user A's tab can therefore present user B's cookie. This lookup records logout only for the cookie owner, so A's outstanding step-up grant remains usable with A's still-valid stolen access token despite A explicitly logging out (the same occurs if A's cookie is missing or expired). Include the authenticated access-token user in logout revocation when available rather than deriving the grant owner solely from the refresh cookie.\n\nUseful? React with 👍 / 👎.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `a5214cef64`\n \n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\nFixed in `974feb6`. The premise holds on all three points, verified before touching anything:\n\n1. Access token is per-tab — `web/src/auth/tokenStore.ts` keeps it in a module-level `let accessToken`, one instance per tab.\n2. Refresh cookie is per-origin — `AuthCookies.BuildOptions` sets `HttpOnly`, `SameSite=Strict`, `Path=/api/v1/auth`. One jar per browser profile; last login wins.\n3. Logout derived the grant owner solely from the cookie — it read only `ReadRefreshCookie`, and `RevokeRefreshTokenAsync` recorded `RecordLogout(tokenRow.UserId, …)`. No bearer was consulted.\n\nOne thing your description didn't cover, and it decided the shape of the fix: the SPA sent no bearer on logout at all (`raw(\"/auth/logout\", …)` with the optional access-token argument omitted). A server-side-only change would have been dead code against the real client — the \"when available\" case never occurred. So the fix spans both sides.\n\nAttaching a bearer then springs a trap: `IdempotencyMiddleware` gates on `tenant.IsResolved`, so an authenticated logout would start demanding an `Idempotency-Key` and 400. `/api/v1/auth/logout` is now exempt, and a mutant removing that exemption turns five tests red — so this was real, not theoretical.\n\nMechanism. New `IIdentityProvider.RecordLogoutAsync(userId)` records the logout instant without revoking refresh tokens. `Logout` now guards the two axes independently: cookie present → revoke its token and record its owner; caller authenticated → record the bearer's subject. The SPA captures the bearer before the synchronous `clearAccessToken()` and sends it optionally, so an expired token simply leaves the call unauthenticated and the cookie path still ends the session.\n\nThe three cases:\n- Cookie missing/expired, caller authenticated — `RecordLogoutAsync` fires alone.\n- Unauthenticated with a valid cookie (ordinary logout) — unchanged; pre-existing tests pass untouched.\n- Both present, same user — idempotent for free: `RecordLogout` uses `AddOrUpdate` keeping the max, and both paths share the injected `TimeProvider`.\n\nThe bearer path is deliberately narrower than the cookie path. It records the logout instant but does not revoke that user's refresh tokens — otherwise ending one tab would sign them out of every device. `Logout_WithAForeignCookie_DoesNotRevokeTheBearerUsersOtherSessions` pins that.\n\nMutation results:\n\n| Mutant | Result |\n|---|---|\n| `RecordLogoutAsync` disabled | RED ×2 — both finding-scenario tests (re-run independently) |\n| idempotency exemption removed | RED ×5 |\n| swap instead of add (skip cookie revoke when authed) | RED ×2 |\n| over-revoke the bearer user's whole token family | RED ×1 |\n| record at `DateTimeOffset.MaxValue` (permanent poison) | RED ×1 |\n| SPA reads the token after the clear | RED ×1 |\n\nHonest caveat: `…WhenCookieAndBearerAreTheSameUser` stays GREEN under the first mutant. That is correct — the cookie path already covers same-user logout, so it is a regression guard against over-/under-revoking rather than a bug detector. Mutants 2 and 3 do turn it red.\n\nNo GLOSSARY change: line 582 already promises grants are \"invalidated … by that user logging out\". No concept appears or changes meaning — the fix makes an already-documented contract true. The `StepUpGrantService` threat-model comment's \"Revoked by logout\" bullet was updated instead, preserving the non-enumerating collapse, audience isolation, single-use `jti`, stamp revocation and tick-precision rationale verbatim.\n\nBuild clean at 0 warnings; integration 653 passed / 0 failed (StepUpAuthTests 24 → 31); `npm test` 1237 passed; coverage gate exit 0 with no floor lowered.\n@codex the P2 (revoke the access-token user's grant on logout) is addressed in `974feb6`. Premise verified on all three points before changing anything — per-tab access token, per-origin cookie, and a logout that consulted only the cookie.\n\nTwo things your description didn't cover that shaped the fix:\n\n1. The SPA sent no bearer on logout at all, so a server-only change would have been dead code — the \"when available\" case never occurred against the real client. The fix spans both sides.\n2. Attaching a bearer makes `IdempotencyMiddleware` (which gates on `tenant.IsResolved`) start demanding an `Idempotency-Key` on an authenticated logout. `/api/v1/auth/logout` is now exempt; a mutant removing that exemption turns five tests red.\n\nThe bearer path deliberately records the logout instant without revoking that user's refresh tokens — otherwise ending one tab would sign them out of every device, which a dedicated test pins. Six mutants, all red; one regression-guard test stays green under the first mutant and I've explained why in the thread rather than dressing it up as a kill.\n\nReady for your re-check.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `974feb646c`\n \n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\n_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Record the bearer logout even if cookie revocation fails\n\nWhen a refresh cookie is present and `RevokeRefreshTokenAsync` throws—for example, during a transient database outage—the exception prevents this bearer-specific path from running. The SPA still clears its local access token and treats logout as best-effort, but the user's outstanding step-up grant remains valid; if the database recovers before the grant expires, a captured access token and grant can still perform the privileged operation after the user logged out. Ensure the in-memory bearer logout is recorded independently of failures in the cookie revocation path.\n\nUseful? React with 👍 / 👎.\nFixed in `d568f0c`. Correct, and it was a hole in the fix from one round earlier — I put the in-memory recording after the database call, so a transient outage skipped it entirely.\n\nShape: plain reordering, no try/catch. `RecordLogoutAsync` (in-memory, cannot fail) now runs first; `RevokeRefreshTokenAsync` (hits Postgres, can throw) runs second. Reordering alone gives the independence asked for — the bearer path's success no longer depends on anything after it — and it needs no exception handling to reason about.\n\nThe exception is deliberately not caught: a logout that fails loudly when the database is down is worth keeping, and the SPA already treats logout as best-effort on its side. Response on that path is 500.\n\nOrdering matters in one direction specifically: a DB failure now leaves grants revoked but the refresh token alive. Over-revoking is the fail-safe direction for a security control; the previous order failed the other way.\n\nA second, adjacent bug surfaced while writing the test, and I want to flag it explicitly rather than bury it. Asserting \"fails loudly with a 500\" turned out to be impossible, because `UseExceptionHandler`'s `/error` re-execution passes back through `IdempotencyMiddleware` with the original tenant still resolved and no `Idempotency-Key` header — which none of login/refresh/change-password/step-up/logout ever send. So a genuine 500 on any of those routes was being silently downgraded to a misleading 400 \"Idempotency-Key header is required\". The \"fails loudly\" guarantee was already broken before this change.\n\n`IdempotencyMiddleware` now skips when `IExceptionHandlerFeature` is present — the same signal `Program.cs`'s Serilog request logging already uses to detect that re-execution. It is bundled in `d568f0c` because the new test cannot assert the real status without it; happy to split it into its own commit or PR if you would rather it travel separately.\n\nMutation check (re-run independently): reverting only the reordering, keeping the middleware fix, turns `Logout_WhenCookieRevocationThrows_StillRecordsTheBearersLogout_AndFails500` red with `Expected: Forbidden, Actual: Created` — the grant was not revoked, which is precisely the finding. Restored → green.\n\nThe failure is injected by a `RevokeRefreshTokenThrowsDecorator` over the real `IdentityProvider`, registered via `ConfigureTestServices` following the file's existing override pattern — no simulated database outage.\n\nBuild clean at 0 warnings; integration 654 passed / 0 failed (`StepUpAuthTests` 31 → 32); Domain 283, Application 114.\n@codex the P2 (record the bearer logout even if cookie revocation fails) is addressed in `d568f0c` — the in-memory recording now runs before the database revoke, so a transient outage over-revokes rather than under-revokes. The exception still propagates; that path is a 500.\n\nWriting the test for it surfaced a second, adjacent bug worth your attention: `UseExceptionHandler`'s `/error` re-execution passes back through `IdempotencyMiddleware` with the tenant still resolved and no `Idempotency-Key`, so a genuine 500 on any auth route was being silently downgraded to a misleading 400 \"Idempotency-Key header is required\". The \"fails loudly\" property was already broken before this change. That is fixed in the same commit (skip when `IExceptionHandlerFeature` is present) and called out in the thread reply — say if you would rather it travel as its own commit.\n\nMutation-checked: reverting only the reordering turns the new test red with `Expected: Forbidden, Actual: Created`. Ready for your re-check.\n_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Clear the step-up password when leaving the Owner role\n\nIf an operator selects Owner, enters their current password, and then changes the role to Worker before submitting, this conditional branch never clears `createStepUpPassword`; the field is merely unmounted. A successful Worker creation also closes the dialog via `setCreating(false)` rather than `closeCreate`, so reopening the dialog and selecting Owner reveals the retained account password. Clear this state when switching away from Owner, or unconditionally when the create flow settles.\n\nUseful? React with 👍 / 👎.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `d568f0cdab`\n \n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\nFixed in `aa3e6df`. Real, and worth noting it is the same structural bug as #314, which was fixed on this repo earlier today for exactly the same reason.\n\nYour trace is exact: pick Owner, type the current password, switch to Worker, submit. The `role === OWNER_ROLE` branch that clears the field never runs, and the success path did not clear it either — so the operator's own account password survived in state and appeared on the next open with Owner selected.\n\nThe root cause is the duplication you pointed at. `closeCreate()` exists precisely to be the one reset path (that was #314's fix), but the success path repeated the field list inline and called `setCreating(false)` directly. The copy then drifted the moment #308 added new dialog state: the inline list never learned about `createStepUpPassword`.\n\nSo rather than adding a sixth line to the duplicate, the success path now closes through `closeCreate()`. New dialog state can only be forgotten in one place instead of two.\n\nOn the test that should have caught this: `never stores the entered step-up password: reopening after a successful use shows it empty` submits as Owner, so it runs the clearing branch on the way past and passes with the bug present. The new test switches Owner → Worker before submitting, which is the only path where nothing clears the field. It also asserts `stepUp` was never called and the grant argument is `undefined`, so it fails if the switch silently still requested a grant.\n\nMutation-checked: restoring the duplicated reset list turns the new test red (`expected '' but got 'OwnerCurrentPw!1'`-shaped failure on the reopened field); restored → green. `UsersPage.test.tsx` 58 passed, full web suite 1238 passed / 66 files, typecheck clean, coverage gate exit 0 with no floor lowered.\n@codex the P2 (clear the step-up password when leaving the Owner role) is addressed in `aa3e6df`.\n\nYou found a credential leak of the operator's own account password, and the root cause was the duplication you pointed at: `closeCreate()` is supposed to be the single dialog-reset path, but the create-success path repeated the field list inline — so when #308 added `createStepUpPassword`, only one of the two copies learned about it. Fixed by closing through `closeCreate()` rather than extending the duplicate, so future dialog state can only be forgotten in one place.\n\nWorth flagging that the existing \"reopening after a successful use shows it empty\" test passes with the bug present, because it submits as Owner and so runs the clearing branch. The new test switches Owner → Worker first, which is the only path where nothing clears the field. Mutation-checked red. Ready for your re-check.\nCodex Review: Didn't find any major issues. Delightful!\n\nReviewed commit: `aa3e6df813`\n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\n@codex thanks — noting that the `Didn't find any major issues` verdict was for `aa3e6df`, but the branch has since been rebased onto `main` and the head is now `748a546`. Two things changed in that rebase that are worth a fresh look rather than inheriting the previous pass:\n\n1. The branch's own copy of the `/error` exception-handler skip in `IdempotencyMiddleware` was dropped — that fix now comes from `main` (#345/#346), which landed the same guard independently while this PR carried it.\n2. The rebase across #337 (which restructured that middleware and changed its constructor) initially produced no conflict while silently duplicating the guard; that was caught and removed, but the file is worth re-reading on the rebased head.\n\nWhat the branch still contributes to that file is only the two `ResponseNotCacheable` entries — `/api/v1/auth/step-up` and `/api/v1/auth/logout` — both of which are load-bearing: without the logout entry, an authenticated logout resolves a tenant and 400s for a missing `Idempotency-Key`, so the SPA could not log out at all.\n\nIntegration 675 passed, web 1238 passed, coverage gate exit 0. Ready for a re-check against `748a546`.\n_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Record the cookie owner's logout before revocation\n\nWhen the token-owner lookup succeeds but `ExecuteUpdateAsync` subsequently throws—for example, because of a transient connection failure or deadlock—these lines never run. If the logout has no valid bearer, or its bearer belongs to another tab's user, the SPA has already cleared local authentication and treats the failure as best-effort, but the cookie owner's captured access token and unexpired step-up grant remain usable. The fresh evidence beyond the prior bearer-ordering comment is that the rebased code still places the cookie-owner registry update after the throwing database update; record it immediately after the successful owner lookup instead.\n\nUseful? React with 👍 / 👎.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `748a546204`\n \n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\nFixed in `185ff3a`. Correct, and it is my previous fix applied one layer too shallow.\n\nLast round I reordered `AuthEndpoints.Logout` so the bearer's in-memory `RecordLogout` runs before the database revoke. But inside `RevokeRefreshTokenAsync` the cookie owner's `RecordLogout` still sat after `ExecuteUpdateAsync` — so a throwing bulk update skipped it, and the cookie owner's grant survived their own logout while the SPA had already cleared local auth. I applied the fail-safe ordering principle at one call site and never checked whether it held at the other; your \"the rebased code still places the cookie-owner registry update after the throwing database update\" is exactly right.\n\n`RecordLogout` now runs immediately after the owner lookup, before the bulk update. A database failure therefore over-revokes (grants dead, refresh row possibly still live) rather than under-revoking — the same direction as the outer path.\n\nOn the test, including two mistakes of mine worth recording.\n\nMy first attempt asserted the HTTP status of a faulted logout and never fired at all: I wrote a `DbCommandInterceptor` matching the string `\"RefreshTokens\"`, but the entity maps to a snake_cased table — `RefreshToken.cs` does `builder.ToTable(\"refresh_tokens\")`. The match could never hit, so the request returned 204 and the test would have passed for the wrong reason. I then misdiagnosed that failure publicly as a DI problem (a second `AddDbContext` being a TryAdd no-op). That diagnosis was wrong; the cause was my own string.\n\nThe replacement exercises `RevokeRefreshTokenAsync` directly as a unit — the pattern `ReportQueryBoundingTests` already uses — building `AppDbContext` with the interceptor attached and handing the provider a privately-held `InMemoryStepUpGrantRegistry`, so the assertion reads the actual call rather than an HTTP status. A second scaffolding bug surfaced there too: `ExtractRefreshCookie` returns the raw percent-encoded `Set-Cookie` text, which every other test round-trips through ASP.NET's own cookie parsing; calling the provider in-process skips that, so the token needs `Uri.UnescapeDataString` before the hash matches.\n\nThe broken HTTP-level test was deleted rather than left beside the working one.\n\nMutation-checked independently: restoring the `ExecuteUpdateAsync`-before-`RecordLogout` ordering turns `RevokeRefreshTokenAsync_WhenTheBulkUpdateThrows_StillRecordsTheOwnersLogout` red (`Expected: True, Actual: False`) with the other 32 still green; restored → 33/33. The sibling bearer-path test is untouched and still passes.\n\nBuild clean at 0 warnings; integration suite 676 passed / 0 failed; Domain 283, Application 114.\n@codex the P2 (record the cookie owner's logout before revocation) is addressed in `185ff3a`.\n\nYou were right that this was unfixed by the earlier bearer-ordering change: I had applied the fail-safe ordering at the outer call site (`AuthEndpoints.Logout`) and left the same hazard inside `RevokeRefreshTokenAsync`, where the cookie owner's `RecordLogout` still followed the throwing bulk UPDATE. It now runs immediately after the owner lookup, so a database failure over-revokes rather than under-revokes.\n\nCoverage is a direct unit-level exercise of `RevokeRefreshTokenAsync` with a fault interceptor on the bulk UPDATE, asserting the registry rather than an HTTP status — my first HTTP-level attempt silently never fired (it matched `\"RefreshTokens\"` while the table is `refresh_tokens`) and would have passed for the wrong reason; it was deleted rather than kept. Mutation-checked: restoring the old ordering turns it red with `Expected: True, Actual: False`.\n\nIntegration 676 passed. Ready for your re-check.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `185ff3a3bb`\n \n\n

ℹ️ About Codex in GitHub
\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n
\n_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Add step-up authentication to the in-app glossary\n\nThis adds the step-up explanation to the Help page's sign-in section and the product glossary, but the live glossary table at the bottom of `HelpPage` and its translation keys remain unchanged. Consequently, users consulting the in-app glossary cannot find the newly introduced step-up-authentication concept; add a localized glossary row alongside this Help update as required for user-visible behavior changes.\n\nAGENTS.md reference: [AGENTS.md:L187-L187](https://github.com/mforce/cluckwork/blob/185ff3a3bb9793d498145bc9d56238d8660ee9e5/AGENTS.md#L187-L187)\n\nUseful? React with 👍 / 👎.\nValid, and it's the same defect I already fixed on #335 — I just didn't carry the lesson across. Fixed in `bdfe265`.\n\nConfirmed before fixing. `grep -i \"step-up\" web/src/routes/HelpPage.tsx` returned exactly one hit: line 130, the `signingInStepUp` sign-in prose. The glossary table (`
`, rows 462–500+) had no step-up row at all. `specs/product/GLOSSARY.md:563` had the concept; the in-app surface didn't. So the finding is exactly right.\n\nWhat changed (5 files, +44):\n- `HelpPage.tsx` — one `` using `glossaryStepUpAuthTerm` / `glossaryStepUpAuthDef`, placed immediately after `glossaryTooManySignInAttempts`. Both are sign-in-security concepts; the roles row is about permissions, not an authentication barrier.\n- `en.ts` / `es.ts` / `tl.ts` — the key pair in all three, es/tl machine-drafted inline per the translate-now policy (pending native review), no English placeholders. Copy is user-facing only: no JWT/grant/audience, no issue numbers.\n- `HelpPage.test.tsx` — one test on the existing `withOverride` pattern, so it asserts against `i18n.addResource` markers rather than hardcoded English.\n\nVerification, run by me on the pushed tree:\n\n- `npm run typecheck` — clean. (This is also the es/tl parity check: the catalogs are typed against `en`'s shape, so a key missing from one is a compile error.)\n- `HelpPage.test.tsx` — 18/18. Full web suite — 1239/1239 across 66 files.\n- Mutation 1, remove the ``: RED, `Unable to find role=\"rowheader\" ... name \"STEP-UP-TERM-MARKER\"`, 1 failed / 17 passed. Restored → 18/18.\n- Mutation 2, keep the row but point the `` at `glossaryTooManySignInAttemptsDef`: also RED, 1 failed / 17 passed. This one matters more than the first — a row-presence test would survive it, and a mis-wired definition cell is the failure this row is most likely to have in practice. Restored → 18/18.\n\nOne note on the test, since it nearly shipped wrong: my first draft asserted the negative against `/re-enter your current password/i`, which also appears in the `signingInStepUp` prose elsewhere on the same page — the assertion would have been answered by a different section entirely. It now asserts against phrasing unique to the glossary definition.\n",{},"created",1785605964.0026765,"Completing the task","event_type","info",{"_95":418,"_99":96,"_410":6468},{"_95":773,"_774":775},"partial_repo_snapshot","files",[776,777,778,779,780],{"_164":6146,"_782":-5,"_783":6147,"_785":-5},{"_164":4338,"_782":-5,"_783":4339,"_785":-5},{"_164":2904,"_782":-5,"_783":2905,"_785":-5},{"_164":999,"_782":-5,"_783":1000,"_785":-5},{"_164":781,"_782":-5,"_783":784,"_785":-5},"web/src/routes/HelpPage.test.tsx","contents","line_range_contents",[786],"missing_reason",{"_787":788,"_789":790,"_410":791,"_792":62},"line_range_start",1,"line_range_end",309,[793,794,795,796,202,797,798,799,800,202,801,802,803,804,805,806,807,808,809,810,811,202,812,813,814,815,202,816,817,202,818,819,820,202,821,822,823,824,825,826,827,816,202,828,829,830,202,831,832,820,202,833,814,834,835,836,837,820,202,838,839,840,841,842,843,844,845,846,847,848,849,850,814,851,820,202,852,814,853,854,855,856,857,858,859,860,861,862,863,820,202,864,814,816,202,865,866,202,867,868,869,870,871,872,820,810,202,873,874,873,202,875,876,877,878,879,880,881,882,883,884,885,886,887,844,888,847,889,849,808,202,890,891,845,892,893,894,820,202,895,896,845,897,898,894,820,202,899,900,845,901,902,903,894,820,202,904,905,845,906,907,894,820,202,908,909,845,910,911,894,820,202,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,820,810,202,873,938,873,202,939,940,941,942,943,885,886,887,844,888,847,889,849,808,202,944,945,946,947,948,949,950,894,820,202,951,952,953,925,954,955,956,957,958,894,820,202,959,960,961,962,963,964,925,965,966,967,968,969,970,971,958,894,820,202,972,973,974,975,845,976,977,894,820,202,978,979,980,981,982,983,921,984,985,924,925,926,927,932,934,986,936,937,820,202,987,988,989,990,991,921,992,993,924,925,994,995,996,997,998,936,937,820,810],"contains_end_of_file","import { describe, it, expect, vi, beforeEach, afterEach } from \"vitest\";","import { render, screen, within, act } from \"@testing-library/react\";","import { HelpPage } from \"./HelpPage\";","import i18n from \"../i18n\";","// Minimal IntersectionObserver stub (jsdom has none): capture the callback so a","// test can simulate a section scrolling into view.","type IOEntry = { isIntersecting: boolean; target: { id: string }; boundingClientRect: { top: number } };","let ioCallback: ((entries: IOEntry[]) => void) | null = null;","beforeEach(() => {"," ioCallback = null;"," class MockIO {"," constructor(cb: (entries: IOEntry[]) => void) { ioCallback = cb; }"," observe() {}"," unobserve() {}"," disconnect() {}"," }"," vi.stubGlobal(\"IntersectionObserver\", MockIO);","});","afterEach(() => vi.unstubAllGlobals());","describe(\"HelpPage\", () => {"," it(\"renders the guide with a contents rail linking to its sections\", () => {"," render();"," expect(screen.getByRole(\"heading\", { name: \"Help\", level: 2 })).toBeInTheDocument();"," const toc = screen.getByRole(\"navigation\", { name: \"Help contents\" });"," expect(within(toc).getByRole(\"link\", { name: \"The daily loop\" })).toHaveAttribute(\"href\", \"#daily-loop\");"," expect(screen.getByRole(\"heading\", { name: \"The daily loop\", level: 3 })).toBeInTheDocument();"," expect(screen.getByRole(\"rowheader\", { name: \"FIFO\" })).toBeInTheDocument();"," });"," it(\"keeps the contents rail and the sections in step, in document order\", () => {"," // The rail is hand-maintained beside the sections it points at (\"must"," // mirror the
sections below, in document order\"). A section"," // added without its entry is invisible to anyone navigating by contents,"," // and an entry without its section is a dead link — neither shows up in a"," // test that only asserts the sections it happens to name."," const { container } = render();"," const linked = within(toc).getAllByRole(\"link\")"," .map((a) => a.getAttribute(\"href\")?.slice(1));"," const sections = Array.from(container.querySelectorAll(\"h3[id]\")).map((h) => h.id);"," expect(sections.length).toBeGreaterThan(0);"," expect(linked).toEqual(sections);"," it(\"documents farm settings, the currency lock and the logo (#123)\", () => {"," expect(screen.getByRole(\"heading\", { name: \"Farm settings (admin)\", level: 3 })).toBeInTheDocument();"," expect(screen.getByRole(\"rowheader\", { name: \"Farm settings\" })).toBeInTheDocument();"," expect(screen.getByRole(\"rowheader\", { name: \"Currency lock\" })).toBeInTheDocument();"," expect(screen.getByRole(\"rowheader\", { name: \"Farm logo\" })).toBeInTheDocument();"," it(\"documents the busy-save indicator (#236) via the catalog key, not a drifting literal\", () => {"," // The line reads common:workingHint so it can never drift from the"," // BusyButton announcement it explains — swap the catalog value and the"," // page must follow (a hardcoded copy of the sentence would not)."," const original = i18n.getResource(\"en\", \"common\", \"workingHint\") as string;"," i18n.addResource(\"en\", \"common\", \"workingHint\", \"WORKING-HINT-MARKER\");"," try {"," render();"," expect(screen.getByText(\"WORKING-HINT-MARKER\")).toBeInTheDocument();"," } finally {"," i18n.addResource(\"en\", \"common\", \"workingHint\", original);"," }"," // And the real copy renders by default."," expect(screen.getByText(/A spinning button means the save is still working/)).toBeInTheDocument();"," it(\"explains the per-account sign-in lock as temporary, without a non-existent admin reset\", () => {"," const signIn = screen.getByRole(\"heading\", { name: \"Signing in\", level: 3 });"," // the lock is described as temporary (wait it out) — the app has no admin"," // password-reset/unlock action, and a reset wouldn't clear the lock anyway."," expect(screen.getByText(/too many wrong passwords for/i)).toBeInTheDocument();"," expect(screen.getByText(/wait up to about 15 minutes/i)).toBeInTheDocument();"," expect(screen.queryByText(/administrator to set a new password/i)).not.toBeInTheDocument();"," // #145 — the session-persistence + post-update re-login note."," expect(screen.getByText(/kept in your browser securely/i)).toBeInTheDocument();"," // #169 — the session survives the app being open in several tabs at once."," expect(screen.getByText(/several tabs/i)).toBeInTheDocument();"," expect(signIn).toBeInTheDocument();"," it(\"scroll-spies the contents rail — the section in view is marked current\", () => {"," // first item is current by default (Getting around leads the guide now)"," expect(within(toc).getByRole(\"link\", { name: \"Getting around\" })).toHaveAttribute(\"aria-current\", \"location\");"," // 'Flocks & birds' scrolls into view → it becomes current, the previous clears"," act(() => ioCallback?.([{ isIntersecting: true, target: { id: \"flocks\" }, boundingClientRect: { top: 12 } }]));"," const flocks = within(toc).getByRole(\"link\", { name: \"Flocks & birds\" });"," expect(flocks).toHaveClass(\"active\");"," expect(flocks).toHaveAttribute(\"aria-current\", \"location\");"," expect(within(toc).getByRole(\"link\", { name: \"Getting around\" })).not.toHaveAttribute(\"aria-current\");","// ---------------------------------------------------------------------------","// i18n wiring (#182, Task 32, batch B6a)","// `help` IS in TRANSLATED_NAMESPACES, but these tests still run under the","// default English locale, so asserting the plain English string would prove","// nothing beyond \"the fallback still works\" (the same CONTRIBUTING-i18n.md","// fallback trap the other batches' i18n-wiring suites guard against). Swap","// the catalog value at runtime instead — the same i18n.addResource technique","// used by AccountPage.test.tsx/SettingsPage.test.tsx — so each marker only","// renders if the component actually reads the catalog rather than a literal","// that happens to still match it. A hardcoded literal instead of a t()/","// call fails these assertions: that IS the mutation probe.","describe(\"HelpPage i18n wiring (#182, Task 32)\", () => {"," function withOverride(key: string, value: string, run: () => void) {"," const original = i18n.getResource(\"en\", \"help\", key) as string;"," i18n.addResource(\"en\", \"help\", key, value);"," run();"," i18n.addResource(\"en\", \"help\", key, original);"," it(\"reads the page heading from the catalog, not a hardcoded literal\", () => {"," withOverride(\"heading\", \"HEADING-MARKER\", () => {"," expect(screen.getByRole(\"heading\", { name: \"HEADING-MARKER\", level: 2 })).toBeInTheDocument();"," expect(screen.queryByRole(\"heading\", { name: \"Help\", level: 2 })).not.toBeInTheDocument();"," });"," it(\"reads the lead paragraph from the catalog, not a hardcoded literal\", () => {"," withOverride(\"lead\", \"LEAD-MARKER\", () => {"," expect(screen.getByText(\"LEAD-MARKER\")).toBeInTheDocument();"," expect(screen.queryByText(/how Cluckwork works/i)).not.toBeInTheDocument();"," it(\"reads a contents-rail label from the catalog via its toc* key, not a hardcoded literal\", () => {"," withOverride(\"tocDailyLoop\", \"RAIL-MARKER\", () => {"," const toc = screen.getByRole(\"navigation\", { name: \"Help contents\" });"," expect(within(toc).getByRole(\"link\", { name: \"RAIL-MARKER\" })).toHaveAttribute(\"href\", \"#daily-loop\");"," expect(within(toc).queryByRole(\"link\", { name: \"The daily loop\" })).not.toBeInTheDocument();"," it(\"reads a plain (no-) list item from the catalog via t(), not a hardcoded literal\", () => {"," withOverride(\"flocksPermissions\", \"PLAIN-ITEM-MARKER\", () => {"," expect(screen.getByText(\"PLAIN-ITEM-MARKER\")).toBeInTheDocument();"," expect(screen.queryByText(/create a flock and view the bird ledger/i)).not.toBeInTheDocument();"," it(\"reads a 'Fixing mistakes' table cell from the catalog, not a hardcoded literal\", () => {"," withOverride(\"mistakesRow1Mistake\", \"MISTAKE-ROW-MARKER\", () => {"," expect(screen.getByRole(\"cell\", { name: \"MISTAKE-ROW-MARKER\" })).toBeInTheDocument();"," expect(screen.queryByText(/depleted or archived the wrong flock/i)).not.toBeInTheDocument();"," // The multi-tag proof: override a key whose en value carries BOTH"," // a and an tag (signingInRateLimit) with a marker of the same"," // shape, and assert real STRONG/EM elements come out the other end — not"," // literal \"\"/\"\" text. This is what would catch a regression"," // from , em: }}> back to a"," // plain {t(...)} call (which would render the tags as inert text) or to a"," // components map missing one of the two tags (which would render that"," // tag's content as unwrapped plain text instead of an element)."," it(\"renders a multi-tag paragraph's and as real DOM elements via \", () => {"," withOverride("," \"signingInRateLimit\","," \"PRE-TEXT STRONG-MARK MID-TEXT EM-MARK POST-TEXT\","," () => {"," render();"," const strong = screen.getByText(\"STRONG-MARK\");"," expect(strong.tagName).toBe(\"STRONG\");"," const em = screen.getByText(\"EM-MARK\");"," expect(em.tagName).toBe(\"EM\");"," // The surrounding plain text is still present, not swallowed —"," // proves the whole marker string round-tripped through the catalog."," expect(screen.getByText(/PRE-TEXT/)).toBeInTheDocument();"," expect(screen.getByText(/MID-TEXT/)).toBeInTheDocument();"," expect(screen.getByText(/POST-TEXT/)).toBeInTheDocument();"," expect(screen.queryByText(/slow down anyone guessing passwords/i)).not.toBeInTheDocument();"," },"," );","// Glossary i18n wiring (#182, Task 33, batch B6b)","// Same withOverride technique as the B6a suite above, redefined locally so","// this describe block stands alone — the glossary (h3 id=\"glossary\" through","// the closing repo-note) is externalized here, after the rest of the page's","// prose was already done in 6a.","describe(\"HelpPage glossary i18n wiring (#182, Task 33)\", () => {"," it(\"reads the glossary heading from the catalog, not a hardcoded literal, and keeps id=\\\"glossary\\\"\", () => {"," withOverride(\"glossaryHeading\", \"GLOSSARY-HEADING-MARKER\", () => {"," const { container } = render();"," expect(screen.getByRole(\"heading\", { name: \"GLOSSARY-HEADING-MARKER\", level: 3 })).toBeInTheDocument();"," expect(screen.queryByRole(\"heading\", { name: \"Glossary\", level: 3 })).not.toBeInTheDocument();"," // the scroll-spy anchor id is untouched by the text-content change"," expect(container.querySelector(\"h3#glossary\")).toHaveTextContent(\"GLOSSARY-HEADING-MARKER\");"," it(\"reads a glossary row's term and definition from the catalog, not a hardcoded literal\", () => {"," withOverride(\"glossaryFifoTerm\", \"FIFO-TERM-MARKER\", () => {"," withOverride(\"glossaryFifoDef\", \"FIFO-DEF-MARKER\", () => {"," expect(screen.getByRole(\"rowheader\", { name: \"FIFO-TERM-MARKER\" })).toBeInTheDocument();"," expect(screen.getByText(\"FIFO-DEF-MARKER\")).toBeInTheDocument();"," expect(screen.queryByRole(\"rowheader\", { name: \"FIFO\" })).not.toBeInTheDocument();"," expect(screen.queryByText(/first in, first out/i)).not.toBeInTheDocument();"," });"," // #308 — step-up authentication's in-app glossary row. Same shape as the"," // FIFO row above: proves the row exists and reads term + def from the"," // catalog, not a hardcoded literal."," it(\"reads the step-up authentication row's term and definition from the catalog, not a hardcoded literal\", () => {"," withOverride(\"glossaryStepUpAuthTerm\", \"STEP-UP-TERM-MARKER\", () => {"," withOverride(\"glossaryStepUpAuthDef\", \"STEP-UP-DEF-MARKER\", () => {"," expect(screen.getByRole(\"rowheader\", { name: \"STEP-UP-TERM-MARKER\" })).toBeInTheDocument();"," expect(screen.getByText(\"STEP-UP-DEF-MARKER\")).toBeInTheDocument();"," expect(screen.queryByRole(\"rowheader\", { name: \"Step-up authentication\" })).not.toBeInTheDocument();"," // \"re-enter your current password\" also appears in the unrelated Signing-in"," // prose (signingInStepUp) — assert against phrasing unique to the glossary"," // def so this doesn't false-pass against that other section."," expect(screen.queryByText(/extra check on top of being signed in/i)).not.toBeInTheDocument();"," // The Farm palette row's is faithfully plain prose (no interleaved"," // JSX) — confirm it also reads from the catalog via t(), not a literal."," it(\"reads the Farm palette row's definition from the catalog, not a hardcoded literal\", () => {"," withOverride(\"glossaryFarmPaletteDef\", \"FARM-PALETTE-DEF-MARKER\", () => {"," expect(screen.getByText(\"FARM-PALETTE-DEF-MARKER\")).toBeInTheDocument();"," expect(screen.queryByText(/farm-wide accent colour/i)).not.toBeInTheDocument();"," // The one -in-a-row case: Install to home screen's definition"," // carries a single not. Overriding with a marker of the"," // same shape and asserting a real STRONG element comes out is what would"," // catch a regression to a plain {t(...)} call (tags render as inert text)"," // or a components map missing \"strong\" (content renders unwrapped)."," it(\"renders the Install-to-home-screen row's as a real DOM element via \", () => {"," \"glossaryInstallToHomeScreenDef\","," \"PRE-TEXT STRONG-MARK POST-TEXT\","," expect(screen.queryByText(/does not make the app work offline/i)).not.toBeInTheDocument();"," // The closing repo-note's renders a element around the"," // (untranslated, literal) GLOSSARY.md path. Confirm both that the CODE"," // element is real DOM (not inert \"\" text) and that overriding the"," // surrounding sentence proves the whole string is catalog-driven."," it(\"renders the closing note's path as a real DOM element via , from the catalog\", () => {"," \"glossaryRepoNote\","," \"REPO-NOTE-MARKER specs/product/GLOSSARY.md.\","," const code = screen.getByText(\"specs/product/GLOSSARY.md\");"," expect(code.tagName).toBe(\"CODE\");"," expect(screen.getByText(/REPO-NOTE-MARKER/)).toBeInTheDocument();"," expect(screen.queryByText(/Full spec-language definitions live in the repository's/i))"," .not.toBeInTheDocument();","web/src/i18n/tl.ts",[1001],{"_787":788,"_789":1002,"_410":1003,"_792":62},2286,[1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1036,1049,1050,1051,1052,202,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1036,1072,1073,1036,202,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,202,1091,1092,1093,1094,1095,1096,1097,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1112,202,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,202,1125,1126,1127,1128,1129,1036,202,1074,1130,1131,1132,1133,1134,1036,202,1074,1135,1136,1137,1138,1139,1140,1141,1142,1143,1144,1145,1146,1147,1148,1036,202,1074,1149,1150,1151,1152,1153,1154,1155,1036,202,1074,1156,1157,1158,1159,1160,1036,202,1074,1161,1162,1163,1164,1146,1165,1166,1036,202,1167,1168,1169,1023,1170,1171,202,1172,1173,1174,1175,1176,1177,1178,1179,1180,1181,1182,1183,1184,1185,1186,1187,1188,1189,202,1190,1191,1192,1193,1194,1195,1196,1197,1198,1199,1200,1201,202,1202,1203,1204,1205,1206,1207,1208,1209,202,1210,1211,1212,202,1213,1214,202,1215,1216,1217,1218,1219,1220,1221,1222,1223,1224,1225,202,1226,1227,1228,1229,1230,1231,1232,202,1233,1234,1235,1236,1237,1238,1239,1240,1241,1242,202,1243,1244,1245,1246,1247,1248,1249,1250,1251,202,1252,1253,1254,1255,1256,1257,1258,1259,1260,1261,1262,1263,1264,1265,202,1266,1267,1268,1269,1270,1271,1036,202,1272,1273,1274,1275,1276,1277,1278,1279,1280,202,1281,1282,1283,1284,1285,202,1286,1287,202,1288,1289,1290,1291,1292,1293,202,1294,1295,1296,1297,1298,1299,1300,202,1301,1302,1303,1304,1305,1306,1307,1308,202,1309,1310,1311,1312,1313,202,1314,1315,1316,1317,1318,1319,202,1320,1321,1322,1323,1324,1325,1326,202,1327,1328,1329,1330,1331,1332,1333,202,1334,1335,1336,1337,1338,1339,1340,1341,1342,202,1343,1344,1345,1346,1347,202,1348,1349,1350,1351,1352,1353,202,1354,1355,1356,1036,202,1272,1357,1358,1359,1360,1361,1081,1362,1363,202,1281,1364,1365,202,1366,1367,1368,1369,202,1370,1371,1372,1373,1374,1375,1376,1377,1378,202,1379,1380,1381,1382,1383,1384,1385,202,1386,1387,1388,1389,1390,1391,1036,202,1272,1392,1393,1394,1395,1396,1397,1398,202,1281,1399,1400,1401,1402,1403,1404,202,1405,1406,1407,1408,202,1409,1289,1291,1292,1410,1411,1412,1413,1414,1415,1416,202,1417,1418,1419,1420,202,1243,1421,1422,202,1354,1423,1424,202,1425,1426,1427,1428,1429,202,1430,1431,1373,1432,1433,1434,1435,1436,1437,1036,202,1272,1438,1439,1440,1441,1442,1443,1444,1445,1446,1447,1448,202,1449,1450,202,1405,1451,1452,1453,202,1172,1454,1455,1456,1457,1458,1459,1460,202,1461,1462,1463,1464,1465,1466,202,1467,1468,1469,1470,1471,1374,202,1472,1473,1036,202,1474,1475,1476,1477,1478,1479,1480,1481,1482,1483,1484,1485,1486,1487,1405,1488,1489,1490,202,1281,1491,1492,1493,1494,1421,1495,1496,1497,1498,1499,1500,1501,1502,1503,202,1504,1505,1506,1507,1508,1509,1510,1511,1512,1513,1514,202,1515,1516,1517,1518,1519,1520,1521,1522,1523,1524,1525,202,1526,1527,1528,1415,1529,1530,1531,1532,1533,1534,1416,1535,202,1536,1537,1289,1538,1292,1539,202,1540,1541,1542,1463,1543,1544,1545,1546,1159,1547,202,1548,1549,1550,1551,1552,1553,1554,202,1555,1468,1556,1557,1558,1374,1559,1458,1459,1460,1036,202,1474,1560,1561,1562,1563,1564,1565,1566,1567,1568,1569,202,1281,1570,1571,1245,1246,202,1405,1572,1573,1574,1575,202,1576,1577,1578,1579,202,1580,1296,1581,1582,1583,1584,1585,1586,1587,1588,202,1589,1590,1591,1592,1593,202,1594,1595,1468,1382,1596,1597,1374,1458,1459,1460,202,1598,1599,1600,1601,1602,1603,1604,1605,1606,1607,1608,1036,202,1474,1609,1610,1611,1612,1613,1614,1615,1616,1081,1617,1618,202,1281,1619,1620,1621,202,1381,202,1622,1382,1383,1384,1623,1624,1625,1626,1627,202,1628,1629,1630,1631,1632,1633,1634,202,1635,1636,1637,1638,1639,1640,1550,1641,1642,1036,202,1474,1643,1644,1645,1646,1647,1648,1649,1650,1651,1652,1081,1653,1654,202,1281,1399,1655,202,1656,1405,1657,1658,1659,202,1294,1295,1462,1660,1298,1299,1661,202,1662,1663,1664,1665,1666,1667,202,1668,1669,202,1670,202,1671,1468,1672,1673,1674,1675,1374,1676,202,1677,1458,1678,1679,1680,1681,1682,202,1683,1684,1685,1686,1687,1688,1689,1690,1691,1692,202,1693,1694,1695,1696,1697,1698,1699,1700,202,1701,1702,1292,1463,1416,1703,202,1704,202,1548,1549,1550,1705,1552,1036,202,1706,1707,1708,1709,1710,1711,1712,1713,1714,1715,1716,1405,1717,1718,1719,202,1720,1721,1722,1723,1724,1725,1726,1727,1728,1729,1730,1731,1732,1733,1734,1735,1736,1737,1738,1739,1740,1741,1742,1743,1744,1745,1746,1747,202,1748,1749,1750,1751,1752,1753,1754,1755,1756,1757,1758,1759,1760,1761,1762,1763,1764,1765,1766,1767,1768,1769,1770,1771,1772,1773,1774,1775,1776,1777,1778,1779,1780,1781,1782,1783,1784,202,1281,1785,1786,1787,1788,1789,1790,1791,1792,1793,1036,202,1706,1707,1794,1795,1796,1797,1798,1799,1800,1801,1802,1803,1804,1805,1806,1807,1808,202,1809,1810,1811,1812,1813,1814,1815,202,1816,1817,1818,1819,202,1820,1821,1822,1823,1458,1824,1825,202,1826,1827,1828,1829,1830,1831,1832,1833,1834,1835,202,1836,1837,1838,202,1839,1840,1841,1842,1843,1844,1845,1846,1847,202,1281,1848,1849,1850,1851,1036,202,1706,1707,1852,1853,1854,1855,1856,202,1281,1857,1858,1859,1860,1861,1862,1863,1864,202,1865,1244,1245,1246,1247,202,1866,1867,1510,1868,1869,1870,1871,202,1872,1873,1874,1875,1876,1877,1878,1459,1680,1879,202,1880,1881,1292,1882,1883,1884,1885,1886,1887,1888,1889,202,1890,1891,1892,1419,202,1893,1894,1431,1556,1895,1896,1373,1435,1436,1437,1036,202,1706,1707,1897,1898,1899,1900,1901,202,1902,1903,1904,1905,1906,1907,1908,202,1281,1909,1910,202,1911,1912,1468,1913,1914,1915,1435,1916,1036,202,1917,1707,1918,1919,1920,1921,1922,1923,1924,1925,1926,1927,1928,202,1405,1929,1930,1931,1932,202,1933,1934,1935,1936,1859,1937,1861,1938,1939,1940,1941,1942,1943,1944,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1955,1940,1956,1957,202,1866,1289,1958,1427,1428,202,1959,1960,1961,1962,1963,1964,1316,1965,1966,1967,1968,1159,1969,202,1970,202,1971,1431,1373,1374,1391,1972,1973,1974,1975,1976,1977,1978,1458,1979,1980,1437,202,1981,1982,1983,1984,1985,1986,1987,1036,202,1917,1707,1988,1989,1990,1991,1992,1993,1994,1995,1996,1997,1427,1428,202,1998,1431,1375,1976,1999,2000,2001,2002,2003,2004,202,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,1036,202,2018,1707,2019,2020,2021,2022,2023,2024,2025,2026,2027,1405,2028,2029,2030,2031,2032,2033,2034,2035,2036,2037,2038,1437,1036,202,2039,1707,2040,2041,2042,2043,2044,2045,1405,2046,2047,2048,2049,202,2050,2051,2052,2053,202,2054,202,2055,2056,2057,2058,2059,2060,2061,2062,2063,2064,2065,2066,2067,2068,2069,2070,2071,2072,2073,2074,1036,202,1706,2075,2076,2077,2078,2079,2080,2081,2082,2083,2084,2085,2086,2087,2088,2089,2090,2091,2092,2093,2094,2095,2096,2097,2098,2099,2100,2101,2102,2103,2104,202,2105,2106,2107,2108,2109,2110,202,2111,2112,2113,2114,2115,202,2116,2117,2118,202,2119,2120,2121,2122,202,2123,2124,2125,2126,2127,2128,2129,2130,2131,2132,2133,202,2134,2135,2136,2137,2138,202,2139,2140,2141,2142,202,2143,2144,2145,2146,2147,2148,2149,2150,2151,202,2152,2153,2154,202,2155,2156,2157,2158,2159,2160,2161,2162,202,2163,2164,2165,2166,2167,2168,2169,2170,2171,2172,2173,2174,2175,2176,2177,2178,2179,2180,2181,2182,2183,2184,2185,2186,2187,2188,2189,2190,2191,2192,2193,2194,2195,2196,2197,2198,2199,2200,2201,2202,2203,202,2204,2205,2206,2207,2208,2209,2210,2211,2212,2213,2214,2215,2216,2217,1036,202,2218,2219,2220,2221,2222,2223,2224,2225,2226,2227,2228,2229,2230,2231,2232,2233,2234,2235,2236,2237,2238,202,2239,2240,2241,2242,2243,2244,2245,2246,2247,2248,2249,2250,2251,2252,2253,2254,2255,2256,2257,2258,2259,2260,2261,202,2262,2263,2264,2265,2266,2267,2268,2269,2270,2271,2272,2273,2274,2275,202,2276,2277,2278,2279,2280,2281,2282,2283,2284,2285,2286,2287,2288,2289,2290,2291,2292,2293,2294,2295,2296,2297,2298,2299,2300,2301,2302,2303,2304,2305,2306,2307,2308,2309,2310,202,2311,2312,2313,2314,2315,2316,2317,2318,2319,2320,202,2321,2322,2323,2324,2325,2326,2327,2328,2329,2330,2331,2332,2333,2334,2335,2336,2337,2338,2339,2340,2341,2342,2343,2344,2345,2346,2347,2348,2349,2350,2351,2352,2353,202,2354,2355,2356,2357,2358,2359,2360,2361,2362,2363,2364,2365,2366,2367,2368,2369,2370,2371,2372,2373,2374,2375,2376,2377,2378,2379,2380,2381,2382,2383,2384,2385,2386,2387,2388,2389,2390,2391,2392,2393,2394,202,2395,2396,2397,2398,2399,2400,2401,2402,2403,2404,2405,2406,2407,2408,2409,2410,2411,2412,2413,2414,2415,2416,2417,2418,2419,2420,2421,2422,2423,2424,2425,2426,2427,2428,2429,2430,2431,2432,2433,2434,2435,2436,2437,2438,2439,2440,2441,2442,2443,2444,202,2445,2446,2447,2448,2449,2450,2451,2452,2453,2454,2455,2456,2457,2458,202,2459,2460,2461,2462,2463,2464,2465,2466,2467,2468,2469,2470,202,2471,2472,2473,2474,2475,2476,2477,2478,2479,2480,202,2481,2482,2483,2484,2485,2486,2487,2488,2489,2490,2491,2492,2493,202,2494,2495,2496,2497,2498,2499,2500,2501,2502,2503,2504,2505,2506,2507,2508,2509,2510,2511,2512,2513,202,2514,2515,2516,2517,2518,2519,2520,2521,2522,2523,2524,2525,202,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2536,2537,2538,2539,2540,2541,2542,2543,2544,2545,2546,2547,2548,2549,2550,202,2551,2552,2553,2554,2555,2556,2557,2558,2559,202,2560,2561,2562,2563,2564,2565,2566,2567,2568,2569,2570,2571,2572,202,2573,2574,2575,2576,2577,2578,2579,2580,2581,2582,2583,2584,2585,202,2586,2587,2588,2589,2590,2591,202,2592,2593,2594,2595,2596,2597,2598,2599,2600,2601,202,2602,2603,2604,2605,2606,2607,2608,2609,2610,2611,2612,2613,2614,2615,2616,2617,2618,2619,2620,2621,2622,2623,2624,2625,2626,2627,2628,2629,2630,2631,2632,2633,2634,2635,2636,202,2637,2638,2639,2640,2641,2642,2643,2644,2645,202,2646,2647,2648,2649,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2661,2662,2663,2664,2665,2666,2667,2668,2669,202,2670,2671,2672,2673,2674,2675,2676,2677,202,2678,2679,202,2680,2681,202,2682,2683,2684,2685,202,2686,2687,2688,2689,202,2690,2691,2692,2693,2694,202,2695,2696,2697,2698,2699,2700,202,2701,2702,2703,2704,2705,202,2706,2707,2708,2709,2710,2711,202,2712,2713,2714,2715,2716,2717,202,2718,2719,2720,2721,2722,2723,2724,202,2725,2726,2727,2728,2729,2730,2731,2732,2733,2734,2735,202,2736,2737,2738,2739,202,2740,2741,2742,2743,2744,2745,2746,2747,2748,2749,202,2750,2751,2752,2753,2754,2755,2756,202,2757,2758,2759,2760,2761,2762,202,2763,2764,2765,2766,2767,2768,202,2296,2769,2770,2771,2772,2773,2774,202,2775,2776,2777,2778,2779,202,2780,2781,202,2782,2783,2784,2785,202,2786,2787,202,2788,2789,2790,2791,202,2792,2793,2794,2795,202,2796,2797,202,2798,2799,2800,2801,202,2802,2803,2804,2805,202,2806,2807,202,2808,2809,2810,2811,2812,202,2813,2814,2815,2816,202,2817,2818,2819,2820,202,2821,2822,2823,2824,202,2825,2826,2827,2828,202,2829,2830,2831,2832,202,2833,2834,202,2835,2836,2837,2838,202,2839,2840,2841,202,2842,2843,2844,2845,202,2846,2847,2848,2849,202,2850,2851,2852,2853,202,2854,2855,2856,202,2857,2858,2859,2860,2861,202,2862,2863,2864,2865,202,2866,2867,2868,2869,202,2870,2871,2872,2873,202,2874,2875,2876,2877,2878,202,2879,2880,2881,2882,2883,2884,202,2885,2886,2887,2888,2889,2890,202,2891,2892,2893,2894,202,2895,2896,2897,2898,2899,202,2900,2901,2902,1036,2903],"// MACHINE-DRAFTED translation, PENDING NATIVE-SPEAKER REVIEW (#182 / epic #15). Keys mirror en.ts exactly.","//","// Translator notes:","// - sales.reference / sales.referenceOptional (\"Reference\" / \"Reference","// (opsyonal)\") intentionally KEEP \"Reference\" as an English loanword — it is","// the common term for a payment/transaction reference number in PH sales UIs,","// not an untranslated oversight.","// - UI screen/label names referenced in prose (e.g. \"(Customers page)\" in","// sales.addCustomerFirst) are kept in English, matching the actual on-screen","// label, until that screen itself is externalized to the catalog (#182).","export const tl = {"," common: {"," cancel: \"Kanselahin\","," save: \"I-save\","," close: \"Isara\","," delete: \"Burahin\","," edit: \"I-edit\","," add: \"Idagdag\","," confirm: \"Kumpirmahin\","," loading: \"Naglo-load…\","," working: \"Gumagana…\","," workingHint:"," \"Kapag may umiikot na indicator ang isang button, gumagana pa ang pag-save — hindi maitatala nang dalawang beses kahit pindutin itong muli.\","," retry: \"subukan ulit\","," required: \"Kailangan\","," optional: \"Opsyonal\","," actions: \"Mga Aksyon\","," search: \"Maghanap\","," all: \"Lahat\","," none: \"Wala\","," yes: \"Oo\","," no: \"Hindi\","," },"," auth: {"," title: \"Cluckwork\","," email: \"Email\","," password: \"Password\","," signIn: \"Mag-sign in\","," signingIn: \"Nagsa-sign in…\","," invalidCredentials: \"Mali ang email o password.\","," tooManyAttempts:"," \"Sobra na ang subok sa pag-sign in. Maghintay ng ilang minuto at subukan ulit.\","," apiDown: \"Hindi makapag-sign in. Gumagana ba ang API?\","," // machine-drafted (#182) — pending native review."," credentialsTooLong: \"Sobrang haba niyan — tingnan ang iyong email at password.\","," account: {"," preferences: \"Mga Kagustuhan\","," language: \"Wika\","," languageHint: \"Ang wikang gagamitin sa interface, para lang sa iyo.\","," // machine-drafted (#182) — pending native review. Task 25 (B4): the rest"," // of AccountPage. Keys mirror en.ts exactly, including {{role}}/{{min}}"," // placeholders and the tag in roleLine."," // \"Account\" kept as an English loanword (same treatment as"," // sales.reference above) — the common term in PH tech UIs; flag for"," // native review to confirm rather than assume."," heading: \"Account\","," roleLine: \"Naka-sign in ka gamit ang tungkuling {{role}}.\","," changePasswordHeading: \"Palitan ang password\","," changePasswordHint:"," \"Kapag pinalitan mo ang iyong password, ma-si-sign out ka sa lahat \""," + \"ng ibang device — mananatiling naka-sign in ang device na ito.\","," currentPasswordLabel: \"Kasalukuyang password \","," newPasswordLabel: \"Bagong password (min {{min}} na karakter) \","," confirmPasswordLabel: \"Kumpirmahin ang bagong password \","," changePasswordButton: \"Palitan ang password\","," passwordMismatchError: \"Hindi magkatugma ang mga bagong password.\","," passwordTooShortError: \"Dapat hindi bababa sa {{min}} na karakter ang bagong password.\","," passwordChangedMessage: \"Napalitan ang password. Na-sign out na ang ibang mga device.\","," errors: {"," \"Me.Language.Format\": \"Dapat 2–8 letrang code ang wika, halimbawa 'en'.\","," // machine-drafted (#182) — pending native review. Task CT1 (B1 catch-up):"," // backfilling tl for the shared nav chrome (previously English-only under"," // the now-dropped English-first policy). Keys mirror en.ts nav exactly."," // Several short abstract nouns kept as English loanwords (Overview,"," // Insights, Setup, Dashboard, Stock, History, Audit, Export, Account) —"," // same treatment as sales.reference/settings.timezoneLabel above, no"," // settled short Filipino equivalent in common PH tech UI use; flag for"," // native review."," nav: {"," // Section headings (NavGroup.labelKey)."," groupOverview: \"Overview\","," groupProduction: \"Produksyon\","," groupSalesStock: \"Benta at Stock\","," groupInsights: \"Insights\","," groupSetup: \"Setup\","," groupYou: \"Ikaw\","," groupHelp: \"Tulong\","," // Destination labels (NavEntry.labelKey)."," dashboard: \"Dashboard\","," dailyEntry: \"Araw-araw na Tala\","," flocks: \"Mga Kawan\","," water: \"Tubig\","," inventory: \"Imbentaryo\","," stock: \"Stock\","," customers: \"Mga Customer\","," sales: \"Benta\","," history: \"History\","," reports: \"Mga Report\","," expenses: \"Mga Gastos\","," farmSettings: \"Mga setting ng bukid\","," grades: \"Mga Grado\","," products: \"Mga Produkto\","," users: \"Mga User\","," audit: \"Audit\","," export: \"Export\","," account: \"Account\","," // Distinct key from groupHelp above, same coincidental-equal-text"," // treatment as en.ts's own comment describes."," help: \"Tulong\","," // AppLayout chrome."," skipToContent: \"Lumaktaw papunta sa pangunahing content\","," primaryNavAriaLabel: \"Pangunahin\","," signOut: \"Mag-sign out\","," farmLoadFailedNeverLoaded:"," \"Hindi na-load ang mga setting ng bukid na ito, kaya susundin ng mga \""," + \"petsa ang device na ito sa halip na ang bukid.\","," farmLoadFailedStale:"," \"Hindi ma-refresh ang mga setting ng bukid na ito, kaya posibleng \""," + \"luma na ang nakikita mo rito.\","," tryAgain: \"Subukan Ulit\","," titleSuffix: \" — Cluckwork\","," // BottomNav chrome."," tabBarAriaLabel: \"Mga Seksyon\","," moreButton: \"Higit Pa\","," menuTitle: \"Menu\","," allSectionsAriaLabel: \"Lahat ng seksyon\","," // backfilling tl for NumberField's stepper buttons. {{label}} is the"," // caller-supplied field name, interpolated not translated."," numberField: {"," increaseLabel: \"Dagdagan ang {{label}}\","," decreaseLabel: \"Bawasan ang {{label}}\","," // backfilling tl for the app/screen error-boundary fallback UI."," errorBoundary: {"," title: \"May Nangyaring Mali\","," screenBody:"," \"Nagkaproblema ang screen na ito at hindi natapos mag-load. Ligtas \""," + \"ang anumang na-save mo na, pero maaaring kailanganin mong i-type \""," + \"ulit ang kahit anong tina-type mo pa dito. Gumagana pa rin ang \""," + \"ibang bahagi ng app.\","," appBody:"," \"Nagkaproblema ang app at hindi natapos mag-load. Kadalasang \""," + \"naaayos ito ng pag-reload.\","," reload: \"I-reload\","," backToDashboard: \"Bumalik sa dashboard\","," detailsSummary: \"Mga detalye ng error\","," // backfilling tl for the light/night mode toggle. \"Light\"/\"Night\" (mode"," // names) kept as English loanwords — flag for native review."," themeToggle: {"," switchToLightMode: \"Lumipat sa light mode\","," switchToNightMode: \"Lumipat sa night mode\","," light: \"Light\","," night: \"Night\","," // backfilling tl for the shared useConfirm dialog's reason field."," // \"Dahilan\" matches the existing sales.voidReasonLabel precedent."," useConfirm: {"," reasonLabel: \"Dahilan \","," reasonRequired: \"Kailangan ng dahilan.\","," // backfilling tl for the service-worker \"update ready\" banner"," // (UpdatePrompt.tsx, src/pwa)."," pwa: {"," updateAvailable: \"May bagong bersyon ng Cluckwork na handa na.\","," reloading: \"Nire-reload…\","," later: \"Mamaya\","," sales: {"," // Headings"," title: \"Benta\","," payments: \"Mga Bayad\","," ordersHeading: \"Mga Order\","," // Buttons"," newOrder: \"Bagong order\","," newDraftOrder: \"Bagong draft na order\","," save: \"i-save\","," cancelEdit: \"kanselahin\","," edit: \"i-edit\","," remove: \"alisin\","," addLine: \"Magdagdag ng linya\","," confirmOrderButton: \"Kumpirmahin ang order (maglalaan ng stock)\","," cancelDraft: \"Kanselahin ang draft\","," // Intentional screen-specific lowercase variant, distinct from"," // common.close (\"Isara\") — mirrors en.sales.close (#182)."," close: \"isara\","," voidPaymentButton: \"i-void\","," recordPayment: \"Itala ang bayad\","," voidOrderButton: \"I-void ang order (ibabalik ang stock)\","," open: \"buksan\","," loadMore: \"mag-load pa\","," // Form labels"," customer: \"Kustomer\","," date: \"Petsa\","," product: \"Produkto\","," perLabel: \"Bawat\","," quantity: \"Dami\","," unitPriceWithCurrency: \"Presyo bawat yunit ({{code}})\","," method: \"Paraan\","," referenceOptional: \"Reference (opsyonal)\","," noteOptional: \"Tala (opsyonal)\","," amountWithCurrency: \"Halaga ({{code}})\","," status: \"Katayuan\","," // Table headers (shared across the items / payments / orders tables)"," qty: \"Dami\","," eggs: \"Itlog\","," unitPrice: \"Presyo bawat yunit\","," lineTotal: \"Kabuuan ng linya\","," reference: \"Reference\","," amount: \"Halaga\","," total: \"Kabuuan\","," // aria-labels"," editQuantityAriaLabel: \"I-edit ang dami\","," editUnitPriceAriaLabel: \"I-edit ang presyo bawat yunit\","," // Status-filter options — status labels now come from enums:status (#182)."," allOption: \"Lahat\","," // Unit picker (the sale unit, e.g. \"3 Dozen\") — text equals the enum value."," // NOTE (flag for native review): several unit/method nouns kept as common"," // English loanwords (Flat, Tray, Case, Carton, Bank Transfer, Mobile"," // Payment) — normal register in PH farm/retail software; confirm which"," // ones, if any, should switch to a Filipino term."," unitEgg: \"Itlog\","," unitDozen: \"Dosena\","," unitFlat: \"Flat\","," unitTray: \"Tray\","," unitCarton: \"Karton\","," unitCase: \"Case\","," // Payment-method picker — text equals the enum value."," methodCash: \"Cash\","," methodCheck: \"Tseke\","," methodCard: \"Card\","," methodBankTransfer: \"Bank Transfer\","," methodMobilePayment: \"Mobile Payment\","," methodOther: \"Iba pa\","," // Misc UI text"," addCustomerFirst: \"Magdagdag muna ng customer (Customers page), pagkatapos gumawa ng order.\","," noOrdersMatch: \"Walang tugmang order.\","," voidingNeedsAdmin: \"Kailangan ng admin para mag-void.\","," voidReasonLabel: \"Dahilan ng pag-void: {{reason}}\","," orderTotal: \"Kabuuan: {{amount}}\","," perUnit: \"bawat {{unit}}\","," eggsCount: \"({{count}} na itlog)\","," // Interleaves JSX ( around \"outstanding …\") — rendered via ."," paymentsSummary: \"Nabayaran {{paid}} — nakabinbin {{outstanding}}\","," // Inline validation messages"," enterValidAmount: \"Maglagay ng valid na halaga.\","," noDecimalPlaces: \"Walang decimal ang currency na ito.\","," atMostDecimals: \"Pinakamarami {{count}} decimal para sa currency na ito.\","," enterAmountGreaterThanZero: \"Maglagay ng halagang higit sa zero.\","," invalidUnitPrice: \"Di-wastong presyo bawat yunit.\","," loadSalesDataFailed: \"Hindi na-load ang datos ng benta. Gumagana ba ang API?\","," loadOrdersFailed: \"Hindi na-load ang mga order.\","," loadPaymentsFailed: \"Hindi na-load ang mga bayad ng order na ito.\","," // Confirm / askReason dialogs (title / body / confirmLabel)"," confirmOrderTitle: \"Kumpirmahin ang order na ito?\","," confirmOrderBody:"," \"Ang stock ay inilalaan mula sa imbentaryo, ang pinakamatandang lote muna (FIFO). \" +"," \"Ang isang maling kumpirmasyon ay puwedeng i-undo gamit ang Void, na nagbabalik ng stock.\","," confirmOrderConfirmLabel: \"Kumpirmahin ang order\","," cancelDraftTitle: \"Kanselahin ang draft na ito?\","," cancelDraftBody: \"Magiging kinansela ang order at hindi na ito puwedeng i-edit o kumpirmahin.\","," voidPaymentTitle: \"I-void ang bayad na ito?\","," voidPaymentBody: \"Tataas muli ang nakabinbin na halaga ng order ayon sa halaga ng bayad.\","," voidPaymentConfirmLabel: \"I-void ang bayad\","," voidOrderTitle: \"I-void ang nakumpirmang order na ito?\","," voidOrderBody: \"Ang inilaang stock ay babalik sa eksaktong lote ng itlog na pinagmulan nito.\","," voidOrderConfirmLabel: \"I-void ang order\","," // Templated success messages"," orderConfirmed: \"Nakumpirma ang order {{ref}} — nailaan ang stock (FIFO).\","," draftOrderCancelled: \"Nakansela ang draft na order.\","," paymentRecorded: \"Naitala ang bayad.\","," paymentVoided: \"Na-void ang bayad — tumaas muli ang nakabinbin na halaga.\","," orderVoided: \"Na-void ang order {{ref}} — naibalik ang stock sa imbentaryo.\","," // machine-drafted (#182) — pending native review. Task CT2 (B2 catch-up):"," // backfilling tl for the Daily entry capture screen (Task 11, en.ts, batch"," // B2). Keys mirror en.ts dailyEntry exactly, including the"," // {{status}}/{{n}}/{{count}}/{{grade}}/{{losses}}/{{total}}/{{cracked}}/"," // {{dirty}}/{{discarded}} placeholders (no tags in this namespace)."," // The entry-locked banner's status word goes through the `enums`"," // statusLabel helper, not a key here."," dailyEntry: {"," title: \"Araw-araw na Tala\","," // Imperative messages"," loadFlocksGradesFailed: \"Hindi na-load ang mga kawan/grado. Gumagana ba ang API?\","," deepLinkUnavailable:"," \"Ang link na ito para sa pag-edit ay tumuturo sa isang kawan o petsa \""," + \"na hindi na available — ginagamit na lang ang mga karaniwang default.\","," // \"Editing draft\" badge"," editingDraftBadge: \"Ina-edit ang draft\","," // Flock + date context row"," flockLabel: \"Kawan\","," noFlocksYetOption: \"— wala pang kawan —\","," depletedFlockSuffix: \" — naubos, para sa pagtatala ng lumang petsa lang\","," dateLabel: \"Petsa\","," newFlockButton: \"+ bagong kawan\","," // New-flock dialog"," newFlockDialogTitle: \"Bagong kawan\","," nameLabel: \"Pangalan\","," breedLabel: \"Lahi\","," placedLabel: \"Paglagay\","," birdsLabel: \"Mga Ibon\","," createFlockButton: \"Gumawa ng kawan\","," // Locked-day / prefill-failure banners"," entryLockedBanner:"," \"Ang araw na ito ay {{status}} na — umiiral na ang mga lote ng itlog \""," + \"nito. Ginagawa ang mga pagtatama mula sa History (mga admin: \""," + \"i-adjust o i-void).\","," prefillFailedBanner:"," \"Hindi na-check kung may tala na ang araw na ito — naka-block ang \""," + \"pag-save para hindi ma-overwrite ang umiiral nang datos.\","," // Step headings"," stepLabel: \"Hakbang {{n}}\","," stepOfTotal: \"ng 2:\","," eggCountsHeading: \"Bilang ng Itlog\","," gradingHeading: \"Pag-grade\","," // Count field labels"," totalEggsLabel: \"Kabuuang Itlog\","," crackedLabel: \"Basag\","," dirtyLabel: \"Madumi\","," discardedLabel: \"Itinapon\","," mortalityLabel: \"Pagkamatay\","," // Reconciliation readouts (counts pane)"," countsExceedTotalMessage:"," \"Ang basag + madumi + itinapon ({{losses}}) ay lumagpas sa kabuuang \""," + \"itlog ({{total}}).\","," sellableLabel: \"Nabebenta\","," sellableFormula: \"{{total}} − {{cracked}} − {{dirty}} − {{discarded}}\","," deactivatedGradeSuffix: \" (naka-deactivate)\","," // Remainder-assignment gesture (grading pane)"," takeRemainderAriaLabel: \"Ilagay lahat ng {{count}} na natitira sa {{grade}}\","," takeRemainderButton: \"+{{count}}\","," armAriaLabel: \"Pumili ng grado para sa {{count}} na natitira\","," disarmAriaLabel: \"Kanselahin ang pagpili ng grado\","," armButton: \"ilagay lahat sa…\","," disarmButton: \"pumili ng grado…\","," // The `grading` derived object's copy (chip + pinned footer)"," fixCountsFirst: \"Ayusin muna ang mga bilang\","," fixCountsShort: \"ayusin ang mga bilang\","," overSellableCount: \"higit sa bilang na nabebenta\","," overShort: \"sobra\","," gradedDayAddsUp: \"na-grade — tumutugma ang araw\","," allGradedShort: \"lahat na-grade\","," leftToGrade: \"natitirang i-grade\","," leftShort: \"natitira\","," // Pinned footer (phone-only summary + saves)"," countsExceedFooterMessage: \"Lumagpas sa kabuuan ang mga nawala — ayusin ang mga bilang\","," sellableWord: \"nabebenta\","," saveDraftButton: \"I-save ang draft\","," submitButton: \"I-save at isumite (gagawa ng lote ng itlog)\","," // Submit confirmation dialog (one-way action, #59)"," confirmSubmitTitle: \"Isumite ang araw na ito?\","," confirmSubmitBody:"," \"Gagawa ng mga lote ng itlog at hindi na maiedit ang tala. Ang mga \""," + \"pagtatama pagkatapos nito ay kailangan ng adjustment ng manager.\","," confirmSubmitLabel: \"Isumite ang araw\","," // Save-result messages"," submittedMessage: \"Naisumite — {{count}} lote ng itlog ang nagawa.\","," draftSavedMessage: \"Na-save ang draft.\","," // backfilling tl for the Dashboard landing screen (Task 12, en.ts, batch"," // B2). Keys mirror en.ts dashboard exactly, including the {{count}}"," // placeholder (no tags in this namespace). \"Dashboard\"/\"Stock\"/"," // \"Available\"/\"Restricted\"/\"Customer\" kept as English loanwords — same"," // treatment as nav.dashboard/nav.stock and sales.reference above; flag for"," dashboard: {"," title: \"Dashboard\","," loadFailed: \"Hindi na-load ang dashboard. Gumagana ba ang API?\","," panelLoadError: \"Hindi na-load.\","," // Stat row"," statEggsCollectedToday: \"Itlog na Nakolekta Ngayon\","," statEggsAvailable: \"Available na Itlog\","," statActiveFlocks: \"Aktibong Kawan\","," // \"Today\" panel (per-flock production)"," todayPanelTitle: \"Ngayon\","," noFlocksMessage: \"Wala pang kawan — gumawa ng isa sa page na Araw-araw na Tala.\","," flockHeader: \"Kawan\","," statusHeader: \"Katayuan\","," eggsHeader: \"Itlog\","," lossesHeader: \"Nawala\","," mortalityHeader: \"Pagkamatay\","," noEntryBadge: \"walang tala\","," // \"Stock\" panel (by grade)"," stockPanelTitle: \"Stock\","," noStockMessage: \"Wala pang stock — magtala at magsumite ng araw-araw na tala.\","," gradeHeader: \"Grado\","," availableHeader: \"Available\","," restrictedHeader: \"Restricted\","," eggsAvailableMessage: \"{{count}} itlog ang available.\","," // \"Recent sales\" panel (hidden for ReadOnly/Denied, #127)"," salesPanelTitle: \"Mga Kamakailang Benta\","," noOrdersMessage: \"Wala pang order.\","," refHeader: \"Ref.\","," customerHeader: \"Customer\","," totalHeader: \"Kabuuan\","," // backfilling tl for the Water capture + correction screen (Task 13, en.ts,"," // batch B2). Keys mirror en.ts water exactly, including the {{unit}}"," // placeholder (no tags in this namespace). Source/Unit picker"," // values go through the `enums` waterSourceLabel/waterUnitLabel helpers,"," // not a key here."," water: {"," title: \"Tubig\","," loadFlocksFailed: \"Hindi na-load ang mga kawan. Gumagana ba ang API?\","," loadRecordsFailed: \"Hindi na-load ang mga tala ng tubig.\","," loadMoreFailed: \"Hindi na-load ang iba pa.\","," concurrentEditError:"," \"Kababago lang ng record na ito sa ibang lugar — i-reload ang \""," + \"listahan at subukan ulit.\","," intro:"," \"Itala kung ano ang ininom ng bawat kawan — direktang dami, o mga \""," + \"reading ng meter (ang dami ay ang delta ng meter). Puwedeng itama \""," + \"ang mga tala pagkatapos; naka-fix ang kawan at petsa.\","," // Capture form labels"," sourceLabel: \"Pinagmulan\","," unitLabel: \"Yunit\","," fromMeterReadingsLabel: \"mula sa mga reading ng meter\","," meterStartLabel: \"Simula ng Meter\","," meterEndLabel: \"Dulo ng Meter\","," quantityLabelWithUnit: \"Dami ({{unit}})\","," noteLabel: \"Tala\","," // Capture form buttons"," recordWaterButton: \"Itala ang tubig\","," saveCorrectionButton: \"I-save ang pagtatama\","," cancelEditButton: \"kanselahin ang pag-edit\","," quantityMustBePositive: \"Dapat positibong numero ang dami.\","," bothMeterReadingsRequired: \"Kailangan ang parehong reading ng meter.\","," recordedMessage: \"Naitala ang tubig.\","," recordCorrectedMessage: \"Naitama ang tala ng tubig.\","," // Records list — filters"," recordsHeading: \"Mga Tala\","," fromLabel: \"Mula\","," toLabel: \"Hanggang\","," noRecordsMatch: \"Walang tumugmang tala ng tubig.\","," // Records table"," dateHeader: \"Petsa\","," amountHeader: \"Dami\","," sourceHeader: \"Pinagmulan\","," metersHeader: \"Meter\","," noteHeader: \"Tala\","," correctButton: \"itama\","," loadMoreButton: \"mag-load pa\","," // backfilling tl for the Egg grade catalog admin screen (Task 14, en.ts,"," // batch B2 — the last B2 screen). Keys mirror en.ts grades exactly (no"," // placeholders in this namespace). The Type picker/cell goes through the"," // `enums` gradeTypeLabel helper, and the Active/Inactive status pill"," // through `enums` statusLabel — neither is a key here. Grade NAMES (g.name)"," // are free-form farm data and stay raw, never routed through the catalog."," // \"Sort\" kept as an English loanword (same treatment as sales.reference"," // above) — flag for native review."," grades: {"," title: \"Mga Grado ng Itlog\","," loadingTitle: \"Mga Grado\","," // Imperative message"," loadGradesFailed: \"Hindi na-load ang mga grado. Gumagana ba ang API?\","," \"Lumalabas ang mga nabebentang grado sa mga picker ng daily entry at \""," + \"order. Kapag na-deactivate ang isang grado, aalisin ito sa mga \""," + \"picker; hindi maaapektuhan ang umiiral na stock at history.\","," newGradeButton: \"Bagong grado\","," newGradeDialogTitle: \"Bagong grado\","," editGradeDialogTitle: \"I-edit ang grado\","," addGradeButton: \"Magdagdag ng grado\","," editButton: \"i-edit\","," deactivateButton: \"i-deactivate\","," activateButton: \"i-activate\","," // Create-dialog form labels"," nameLabel: \"Pangalan \","," typeLabel: \"Uri\","," sortLabel: \"Sort\","," saleableLabel: \"nabebenta\","," editNameLabel: \"Pangalan\","," // Table headers"," nameHeader: \"Pangalan\","," typeHeader: \"Uri\","," sortHeader: \"Sort\","," saleableHeader: \"Nabebenta\","," // Saleable column's \"yes\" badge"," saleableYesBadge: \"oo\","," // machine-drafted (#182) — pending native review. Task CT3 (B3 catch-up):"," // backfilling tl for the Feed & inventory screen (Task 16, en.ts, batch"," // B3 — first of four B3 screens). Keys mirror en.ts inventory exactly,"," // including the {{name}}/{{quantity}}/{{unit}}/{{category}}/{{code}}"," // placeholders (no tags in this namespace). Category and"," // movement-type displays go through the `enums`"," // inventoryCategoryLabel/inventoryMovementLabel helpers, not a key here —"," // the {{category}} placeholder in notFeedableMessage IS that"," // already-labelled value, per en.ts's own comment. \"Lote\" used throughout"," // for \"lot\" (a received inventory batch) — an established loanword"," // already used in dailyEntry's \"lote ng itlog\", distinct from \"kawan\""," // (the word used for bird flocks)."," inventory: {"," title: \"Feed at Imbentaryo\","," \"Tumanggap ng stock bilang pagbili; bawat pagbabago ay napupunta sa \""," + \"talaan ng galaw ng item. Susunod ang pagtatala ng paggamit ng feed \""," + \"laban sa mga kawan.\","," loadInventoryFailed: \"Hindi na-load ang imbentaryo. Gumagana ba ang API?\","," invalidCostError: \"Di-wastong halaga.\","," itemCreatedMessage: \"Nagawa ang item.\","," loadLedgerFailed: \"Hindi na-load ang talaan ng galaw.\","," purchaseRecordedMessage: \"Naitala ang pagbili — natanggap ang stock.\","," usageRecordedMessage:"," \"Naitala ang paggamit ng feed — inubos muna ang stock mula sa \""," + \"pinakamatandang lote.\","," adjustQuantityRequired:"," \"Dapat hindi zero ang dami ng pagsasaayos (negatibo ang nag-aalis ng \""," + \"stock).\","," adjustReasonRequired: \"Kailangan ng dahilan para sa mga pagtatama.\","," correctionRecordedMessage: \"Naitala ang pagtatama sa talaan ng galaw.\","," // Page-head button + New/edit item dialogs"," newItemButton: \"Bagong item\","," newItemDialogTitle: \"Bagong item ng imbentaryo\","," editItemDialogTitle: \"I-edit ang item\","," itemNameLabel: \"Pangalan ng item \","," editItemNameLabel: \"Pangalan ng item\","," categoryLabel: \"Kategorya\","," unitLabel: \"Yunit \","," editUnitLabel: \"Yunit\","," defaultCostLabel: \"Default na halaga/yunit\","," addItemButton: \"Magdagdag ng item\","," // Item panel (opened item)"," itemPanelHeading: \"{{name}} — {{quantity}} {{unit}} available\","," recordPurchaseButton: \"Itala ang pagbili\","," recordUsageButton: \"Itala ang paggamit\","," correctStockButton: \"Itama ang stock\","," notFeedableMessage:"," \"Hindi ipinapakain sa mga kawan ang mga item na {{category}} — ang \""," + \"paggamit ay para lang sa mga item na Feed, Suplemento, at Aditibo.\","," noFlocksForUsageMessage: \"Walang kawan — kailangan ng kawan ang paggamit para pakainin.\","," correctionsNeedAdminMessage: \"Kailangan ng admin para sa mga pagtatama ng stock.\","," noLotsMessage: \"Wala pang lote — ang mga pagtatama ay para sa isang natanggap na lote.\","," // Record-purchase dialog"," recordPurchaseDialogTitle: \"Itala ang pagbili — {{name}}\","," receivedLabel: \"Natanggap\","," unitCostLabel: \"Halaga bawat yunit\","," unitCostWithCurrencyLabel: \"Halaga bawat yunit ({{code}})\","," costPlaceholderItemDefault: \"default ng item\","," costPlaceholderRequired: \"kailangan\","," lotNumberLabel: \"Numero ng Lote\","," expiryLabel: \"Expiry\","," recordPurchaseSubmitButton: \"Itala ang pagbili\","," // Record-usage dialog"," recordUsageDialogTitle: \"Itala ang paggamit — {{name}}\","," depletedFlockSuffix: \" (naubos — para sa pagtatala ng lumang petsa lang)\","," recordUsageSubmitButton: \"Itala ang paggamit\","," // Correct-stock dialog"," correctStockDialogTitle: \"Itama ang stock — {{name}}\","," lotFieldLabel: \"Lote\","," adjustTypeAdjustmentOption: \"Pagsasaayos (±)\","," adjustTypeDiscardOption: \"Pagtapon (write-off)\","," adjustQuantityPlaceholderDiscard: \"dami na itinapon\","," adjustQuantityPlaceholderCorrection: \"± pagtatama\","," recordCorrectionButton: \"Itala ang pagtatama\","," // Movement ledger table"," ledgerDateHeader: \"Petsa\","," ledgerTypeHeader: \"Uri\","," ledgerQuantityHeader: \"Dami\","," ledgerNoteHeader: \"Tala\","," noMovementsMessage: \"Wala pang galaw — magtala ng pagbili sa itaas.\","," closeButton: \"isara\","," // Items table"," categoryHeader: \"Kategorya\","," onHandHeader: \"Available\","," defaultCostHeader: \"Default na halaga\","," openButton: \"buksan\","," // backfilling tl for the Product catalog + packed-unit conversions screen"," // (Task 17, en.ts, batch B3 — second B3 screen). Keys mirror en.ts"," // products exactly, including the {{count}}/{{code}}/{{unitCode}}"," // placeholders (no tags in this namespace). Active/Inactive"," // status on both tables goes through the `enums` statusLabel helper, not"," // a key here. Product/grade names and unitCode are free-form farm data"," // and stay raw. \"Catalog\" kept as an English loanword (same treatment as"," // sales.reference above) — flag for native review."," products: {"," title: \"Mga Produkto\","," loadCatalogFailed: \"Hindi na-load ang catalog. Gumagana ba ang API?\","," enterPriceAsNumber: \"Maglagay ng presyo bilang simpleng numero.\","," \"Ang ibinebenta ng bukid. Bawat produktong itlog ay naka-map sa isang \""," + \"grado ng itlog — kumukuha ang benta ng stock mula sa mga lote ng \""," + \"grado na iyon. Kapag na-deactivate, aalisin ang produkto sa mga \""," + \"picker; pinapanatili ng history ang pangalan nito.\","," // Page-head button + New/edit product dialogs"," newProductButton: \"Bagong produkto\","," newProductDialogTitle: \"Bagong produkto\","," editProductDialogTitle: \"I-edit ang produkto\","," // Product form labels"," gradeLabel: \"Grado\","," pickGradeOption: \"Pumili ng grado…\","," soldPerLabel: \"Ibinebenta bawat\","," defaultPriceLabel: \"Default na presyo\","," defaultPriceWithCurrencyLabel: \"Default na presyo ({{code}})\","," priceOptionalPlaceholder: \"opsyonal\","," notesLabel: \"Mga Tala\","," addProductButton: \"Magdagdag ng produkto\","," // Packed-unit (egg-unit-conversion) dialog"," eggsPerUnit: \"Itlog kada {{unitCode}}\","," packedUnitDialogTitle: \"Yunit ng pakete\","," eggsPerUnitFieldLabel: \"Itlog kada yunit\","," activeCheckboxLabel: \"aktibo\","," // Products table"," noProductsMessage: \"Wala pang produkto.\","," soldPerHeader: \"Ibinebenta bawat\","," defaultPriceHeader: \"Default na presyo\","," // Packed units table"," packedUnitsHeading: \"Mga Yunit ng Pakete\","," packedUnitsIntro:"," \"Ilang itlog ang laman ng bawat yunit kapag nagbebenta (12, 18, o 30 \""," + \"ang isang carton depende sa iyong market — i-set ang sa iyo). Ang \""," + \"pagbabago ng yunit ay nakakaapekto lang sa mga susunod na benta; \""," + \"pinapanatili ng mga naitalang order ang bilang na ipinagbili sa \""," + \"kanila.\","," unitHeader: \"Yunit\","," eggsPerUnitHeader: \"Itlog kada yunit\","," alwaysOneMessage: \"laging 1\","," // backfilling tl for the Egg stock summary + drill-down screen (Task 18,"," // en.ts, batch B3 — third B3 screen). Keys mirror en.ts stock exactly,"," // including the {{available}}/{{grades}} placeholders (no tags in"," // this namespace). The movement ledger's Type cell goes through the"," // `enums` stockMovementLabel helper, not a key here. Grade/lot names and"," // quantity values are free-form farm data and stay raw. \"Restricted\" and"," // \"medication withdrawal\" kept as English/Taglish loanwords — no settled"," // short Filipino equivalent in common PH farm-software use; flag for"," stock: {"," title: \"Stock\","," loadStockFailed: \"Hindi na-load ang stock. Gumagana ba ang API?\","," loadLotsFailed: \"Hindi na-load ang mga lote ng grado.\","," loadMovementsFailed: \"Hindi na-load ang mga galaw ng lote.\","," // By-grade stock table"," lotsButton: \"mga lote\","," hideLotsButton: \"itago ang mga lote\","," totalAvailableMessage:"," \"{{available}} itlog ang available sa {{grades}} grado. Restricted = \""," + \"nasa ilalim ng medication withdrawal, hindi puwedeng ibenta.\","," // Lots drill-down (per grade)"," lotsHeading: \"Mga Lote\","," noLotsMessage: \"Wala pang lote para sa grado na ito.\","," producedOnHeader: \"Petsa ng Produksyon\","," producedHeader: \"Produksyon\","," historyButton: \"history\","," hideHistoryButton: \"itago ang history\","," // Movement ledger drill-down (per lot)"," movementLedgerHeading: \"Talaan ng Galaw\","," movementLedgerIntro:"," \"Bawat pagbabago sa available na itlog ng lote na ito — ang running \""," + \"total ay palaging katumbas ng balanse sa itaas.\","," ledgerWhenHeader: \"Kailan (UTC)\","," ledgerChangeHeader: \"Pagbabago\","," ledgerReasonHeader: \"Dahilan\","," // backfilling tl for the Flock roster + bird ledger screen (Task 19,"," // en.ts, batch B3 — last B3 screen). Keys mirror en.ts flocks exactly,"," // including the {{name}}/{{count}}/{{weeks}} placeholders (no "," // tags in this namespace). The bird-ledger Type picker/cell and the"," // flocks table's Status badge go through the `enums`"," // flockMovementLabel/statusLabel helpers, not a key here. Flock"," // name/breed are free-form farm data and stay raw. \"deplete\"/\"archive\""," // translated as \"ubusin\"/\"i-archive\" — \"ubusin\" ties to the already-used"," // \"naubos\" (depleted) adjective elsewhere in the catalog; \"i-archive\""," // matches the i-edit/i-deactivate loanword-verb pattern. Both flagged for"," flocks: {"," title: \"Mga Kawan\","," loadMovementsFailed: \"Hindi na-load ang mga galaw.\","," newFlockButton: \"Bagong kawan\","," \"I-deplete kapag wala nang ibon; i-archive para itago ang kawan sa \""," + \"mga picker at sa dashboard. Patuloy na nire-resolve ng history ang \""," + \"mga pangalan ng mga naka-archive na kawan.\","," breedLabel: \"Lahi \","," addFlockButton: \"Magdagdag ng kawan\","," // Edit-flock dialog"," editFlockDialogTitle: \"I-edit ang kawan\","," editNameLabel: \"I-edit ang pangalan\","," editBreedLabel: \"I-edit ang lahi\","," editPlacedLabel: \"I-edit ang petsa ng paglagay\","," editCountLabel: \"I-edit ang bilang ng ibon\","," // Show-archived toggle"," showArchivedLabel: \"ipakita ang {{count}} naka-archive\","," noFlocksMessage: \"Wala pang kawan.\","," // Flocks table"," breedHeader: \"Lahi\","," placedHeader: \"Paglagay\","," ageHeader: \"Edad\","," birdsHeader: \"Mga Ibon\","," ageWeeksSuffix: \"{{weeks}} ling\","," // Row actions"," depleteButton: \"ubusin\","," archiveButton: \"i-archive\","," reactivateButton: \"i-reactivate\","," openLedgerButton: \"mga ibon\","," closeLedgerButton: \"isara\","," // Deplete/archive confirm dialogs"," depleteConfirmTitle: \"Ubusin ang \\\"{{name}}\\\"?\","," depleteConfirmBody:"," \"Hihinto ang kawan sa pagtanggap ng bagong entry. Gumagana pa rin ang \""," + \"pagtatala ng lumang petsa (backfill).\","," depleteConfirmLabel: \"Ubusin ang kawan\","," archiveConfirmTitle: \"I-archive ang \\\"{{name}}\\\"?\","," archiveConfirmBody:"," \"Mawawala ito sa mga picker at sa dashboard, at hindi na tatanggap ng bago.\","," archiveConfirmLabel: \"I-archive ang kawan\","," // Bird ledger panel"," ledgerHeading: \"Talaan ng ibon — {{name}}\","," ledgerIntro: \"Ang mga row ng pagkamatay ay galing sa mga naisumiteng daily entry.\","," ledgerIntroAdminNote:"," \" Itala ang pagtanggal dito; gumamit ng negatibong pagsasaayos para \""," + \"itama ang maling bilang.\","," ledgerIntroWorkerNote: \" Kailangan ng admin para magtala ng pagtanggal at pagsasaayos.\","," recordMovementButton: \"Itala ang galaw\","," // Record-movement dialog"," recordMovementDialogTitle: \"Itala ang galaw ng ibon\","," recordButton: \"Itala\","," noMovementsMessage: \"Wala pang galaw — nasa unang bilang pa rin ang kawan.\","," ledgerBirdsHeader: \"Mga Ibon\","," // machine-drafted (#182) — pending native review. Task 25c (B4): new"," // namespace, backfilling tl so Tagalog mode renders translated text on the"," // Settings screen. Keys mirror en.ts settings exactly, including the"," // {{cap}}/{{actualKb}}/{{limitKb}}/{{code}} placeholders and the "," // tag in logoSquareHint."," // \"Time zone\" / \"Locale\" / \"Currency\" / \"Localization\" kept as English"," // loanwords (flag for native review) — no settled short Filipino term is in"," // common use in PH tech UIs for these; same treatment as sales.reference"," // above."," settings: {"," heading: \"Mga setting ng bukid\","," \"Kung paano tinatawag ng bukid na ito ang sarili nito, at ang locale, \""," + \"time zone, at currency na ginagamit nito sa pagtala at pagbasa ng trabaho.\","," loadFailedMessage: \"Hindi na-load ang mga setting ng bukid.\","," // Logo panel"," logoSectionHeading: \"Logo\","," logoAlt: \"Kasalukuyang logo ng bukid\","," logoLoadingMessage: \"Naglo-load ang logo…\","," logoLoadFailedMessage: \"Hindi na-load ang logo.\","," logoNoneMessage: \"Walang naka-set na logo — ipinapakita ng sidebar ang Cluckwork mark.\","," uploadLogoButton: \"Mag-upload ng logo\","," replaceLogoButton: \"Palitan ang logo\","," removeLogoButton: \"Alisin\","," logoRulesHint:"," \"PNG, JPEG, o WebP, hanggang {{cap}} at 4096 px kada gilid. Hindi \""," + \"tinatanggap ang mga animated na larawan. Na-save ang larawan nang \""," + \"na-rewrite, tanggal ang camera at location metadata.\","," logoSquareHint:"," \"Gumamit ng parisukat na larawan — maliit lang \""," + \"lumalabas ang logo sa sidebar, kaya mas maganda ang tingin ng \""," + \"simple at maigsing-crop na marka (isang simbolo o iisang letra) \""," + \"doon kaysa sa malawak o detalyadong larawan. Mas maganda kung \""," + \"transparent ang background sa isang light na disenyo.\","," logoWorkingMessage: \"Pinoproseso…\","," logoUpdatedMessage: \"Na-update ang logo.\","," logoRemovedMessage: \"Naalis ang logo.\","," logoOversizeMessage: \"{{actualKb}} KB ang larawang iyon. Ang limitasyon ay {{limitKb}} KB.\","," removeLogoConfirmTitle: \"Alisin ang logo ng bukid?\","," removeLogoConfirmBody:"," \"Babalik ang sidebar sa Cluckwork mark. Puwede kang mag-upload ulit \""," + \"anumang oras.\","," removeLogoConfirmLabel: \"Alisin ang logo\","," // Localization form"," localizationSectionHeading: \"Localization\","," farmNameLabel: \"Pangalan ng bukid\","," timezoneLabel: \"Time zone\","," timezoneUnknownWarning:"," \"Hindi kilala ng browser na ito ang time zone na iyon, kaya susundin \""," + \"ng mga petsa dito ang device sa halip na ang bukid. Pumili ng isa \""," + \"sa listahan.\","," localeLabel: \"Locale\","," currencyLabel: \"Currency\","," currencyLockedNote:"," \"Naka-fix ang currency sa {{code}}: may mga halaga na itong naitala \""," + \"sa currency na ito. Hindi na muling pinepresyuhan ang naitalang \""," + \"pera, kaya kung babaguhin ito, magkakaiba na ang ibig sabihin ng \""," + \"bawat naka-save na total.\","," unitSystemLabel: \"Sistema ng yunit\","," firstDayOfWeekLabel: \"Unang araw ng linggo\","," followLocaleOption: \"Sundin ang locale\","," paletteLegend: \"Paleta ng bukid\","," paletteHint:"," \"Ang accent color para sa lahat sa bukid na ito. Pipiliin pa rin ng \""," + \"bawat tao ang sarili nilang light mode o night mode.\","," paletteAubergine: \"Talong\","," paletteForest: \"Kagubatan\","," paletteSlate: \"Slate\","," paletteTerracotta: \"Terracotta\","," dateFormatLabel: \"Format ng petsa\","," timeFormatLabel: \"Format ng oras\","," savingButton: \"Sine-save…\","," saveButton: \"I-save ang mga setting\","," effectNote:"," \"Agad na naaapektuhan ang lahat ng bahagi ng time zone kapag \""," + \"na-save na ito. Ang locale, sistema ng yunit, at ang mga override \""," + \"sa format ay naitala laban sa bukid at magtatakda kung paano \""," + \"ipapakita ang mga halaga, petsa, at sukat kapag dumating na ang \""," + \"format na iyon.\","," savedMessage: \"Na-save ang mga setting.\","," versionConflictMessage:"," \"May ibang taong nagbago ng mga setting na ito habang bukas ang \""," + \"screen na ito. I-reload at subukan ulit.\","," saveReadBackFailedMessage:"," \"Na-save. Hindi na-basa ulit ng screen na ito ang mga setting — \""," + \"i-reload ang page bago mag-save ulit.\","," refreshFailedMessage:"," \"Na-save. Hindi na-detect ng ibang bahagi ng app ang pagbabago — \""," + \"i-reload ang page para masiguro na naaplay ito sa lahat ng lugar.\","," // Users screen. Keys mirror en.ts users exactly, including the"," // {{label}}/{{email}}/{{role}} placeholders."," // \"flock\" translated as \"kawan\" (the standard Filipino word for a flock of"," // birds) throughout, rather than kept as an English loanword — flag for"," // native review to confirm against local farm-software usage."," users: {"," heading: \"Mga User\","," newUserButton: \"Bagong user\","," roleDescription:"," \"Itinatala ng mga manggagawa ang trabaho ng araw (opsyonal na \""," + \"nakalimita sa mga naka-assign na kawan). Ginagawa rin ng mga \""," + \"Manager ang pagtatama, pag-void, at pag-configure. Ang Benta ang \""," + \"humahawak sa customer, order, at bayad. Nakikita ng Read-only ang \""," + \"stock, history, at reports. Ginagawa ng Admin (may-ari) ang lahat, \""," + \"kasama ang pamamahala ng mga user.\","," // Create-user dialog"," emailFieldLabel: \"Email \","," passwordFieldLabel: \"Password (min 12 na karakter) \","," nameFieldLabel: \"Pangalan\","," roleFieldLabel: \"Tungkulin\","," adminRoleOption: \"{{label}} (may-ari)\","," createUserButton: \"Gumawa ng user\","," // #308 — muling pagkumpirma ng password (machine-drafted, pending native review)"," stepUpFieldLabel: \"Ang kasalukuyan mong password \","," stepUpCreateHint: \"Ang paggawa ng isa pang Owner ay nangangailangan muling ilagay ang kasalukuyan mong password.\","," stepUpResetHint: \"Ang pag-reset ng password ng isang Owner ay nangangailangan muling ilagay ang kasalukuyan mong password.\","," // Users table"," emailColumnHeader: \"Email\","," nameColumnHeader: \"Pangalan\","," roleColumnHeader: \"Tungkulin\","," resetPasswordButton: \"password\","," flocksButton: \"mga kawan\","," // Flock-access dialog"," flockAccessTitle: \"Access sa kawan — {{email}}\","," flockAccessHint:"," \"Walang assignment = puwedeng magtala ang manggagawa para sa kahit \""," + \"anong kawan. Ang unang assignment ang naglilimita sa kanila sa mga \""," + \"nakalistang kawan lang.\","," noAssignmentsMessage: \"Walang assignment — access sa buong account.\","," removeAssignmentButton: \"alisin\","," assignFlockButton: \"Mag-assign ng kawan\","," doneButton: \"Tapos na\","," // Edit-user dialog"," editUserTitle: \"I-edit ang user — {{email}}\","," clearNameHint: \"Iwanang blangko para burahin ang pangalan.\","," // Set-password dialog"," setPasswordTitle: \"Itakda ang password — {{email}}\","," passwordDialogHint:"," \"Hindi mo kailangan ang kasalukuyan nilang password. Kapag itinakda \""," + \"mo ito, ma-si-sign out sila sa lahat ng device — sabihin nang \""," + \"direkta sa kanila ang bagong password.\","," newPasswordFieldLabel: \"Bagong password (min 12 na karakter) \","," confirmPasswordFieldLabel: \"Kumpirmahin ang bagong password \","," setPasswordButton: \"Itakda ang password\","," createSuccessMessage: \"Nagawa ang {{role}} account para sa {{email}}.\","," passwordMismatchMessage: \"Hindi magkatugma ang mga password.\","," passwordSetMessage: \"Naitakda ang password para sa {{email}}. Na-sign out na sila sa lahat ng lugar.\","," updatedMessage: \"Na-update ang {{email}}.\","," // Expenses screen. Keys mirror en.ts expenses exactly, including the"," // {{name}}/{{count}}/{{amount}}/{{code}}/{{date}}/{{description}}"," // placeholders."," expenses: {"," title: \"Mga Gastos\","," expenseRecordedMessage: \"Naitala ang gastos.\","," expenseCorrectedMessage: \"Naitama ang gastos.\","," conflictRebindMessage:"," \"Binago ng ibang tao ang gastos na ito — ipinapakita na ngayon ng \""," + \"form ang pinakabagong mga value; i-apply ulit ang iyong pagtatama.\","," categoryCreatedMessage: \"Nagawa ang kategorya.\","," categoryDeactivatedMessage: \"Na-deactivate ang kategoryang \\\"{{name}}\\\".\","," categoryReactivatedMessage: \"Na-reactivate ang kategoryang \\\"{{name}}\\\".\","," // Amount-parsing validation"," // Filters"," monthLabel: \"Buwan\","," allCategoriesOption: \"Lahat ng kategorya\","," hideCategoriesButton: \"itago ang mga kategorya\","," manageCategoriesButton: \"pamahalaan ang mga kategorya\","," monthTotalLabel: \"Kabuuan ng buwan: {{amount}}\","," // Category-management panel"," categoriesHeading: \"Mga kategorya ng gastos\","," newCategoryButton: \"Bagong kategorya\","," newCategoryDialogTitle: \"Bagong kategorya ng gastos\","," categoryNameLabel: \"Pangalan ng kategorya\","," addCategoryButton: \"Magdagdag ng kategorya\","," deactivatedSuffix: \" (naka-deactivate)\","," noCategoriesMessage: \"Wala pang kategorya — magdagdag ng isa sa itaas.\","," // Record-expense form"," recordExpenseHeading: \"Magtala ng gastos\","," pickOption: \"— pumili —\","," descriptionLabel: \"Deskripsyon\","," amountLabel: \"Halaga ({{code}})\","," flockOptionalLabel: \"Kawan (opsyonal)\","," noneOption: \"— wala —\","," noteOptionalLabel: \"Tala (opsyonal)\","," recordExpenseButton: \"Itala ang gastos\","," addCategoryFirstMessage: \"Magdagdag muna ng kategorya — kailangan nito ng bawat gastos.\","," // Correct-expense dialog"," correctExpenseDialogTitle: \"Itama ang gastos\","," correctExpenseDialogTitleWithExpense: \"Itama — {{date}}, {{description}}\","," // Expenses table"," noExpensesMessage: \"Walang gastos ngayong buwan.\","," descriptionHeader: \"Deskripsyon\","," amountHeader: \"Halaga\","," // Customers screen. Keys mirror en.ts customers exactly (no placeholders"," // in this namespace)."," customers: {"," title: \"Mga Customer\","," newCustomerButton: \"Bagong customer\","," // Create-customer dialog"," nameFieldLabel: \"Pangalan \","," phoneFieldLabel: \"Telepono \","," emailFieldLabel: \"Email\","," addressFieldLabel: \"Address\","," noteFieldLabel: \"Tala\","," addCustomerButton: \"Magdagdag ng customer\","," loadCustomersErrorMessage: \"Hindi na-load ang mga customer.\","," loadBalancesErrorMessage: \"Hindi na-load ang mga balance ng customer.\","," // Customers table"," noCustomersMessage: \"Wala pang customer.\","," phoneHeader: \"Telepono\","," emailHeader: \"Email\","," addressHeader: \"Address\","," outstandingHeader: \"Nakabinbin\","," // machine-drafted (#182) — pending native review. Task 28 (B5): new"," // History screen. Keys mirror en.ts history exactly, including the"," // {{status}}/{{date}}/{{flock}}/{{total}}/{{mortality}}/{{reason}}/{{time}}"," // placeholders. \"Daily entry page\" (noEntriesMatch) is kept fully in"," // English, matching the existing sales.addCustomerFirst \"(Customers page)\""," // precedent of leaving an unexternalized screen's name untranslated until"," // dailyEntry itself is added to TRANSLATED_NAMESPACES. Status-pill labels"," // (statusVoided/statusAdjusted/statusLocked/statusSubmitted/statusDraft)"," // reuse the same words already chosen for enums.status. for consistency."," history: {"," loadingTitle: \"Kasaysayan\","," title: \"Kasaysayan ng araw-araw na entry\","," \"Puwedeng i-adjust o i-void dito ang mga naisumite at naka-lock na \""," + \"entry — awtomatikong susunod ang stock at ang rekord ng manok; \""," + \"hindi na gumagalaw ang mga itlog na nabenta na. Palaging \""," + \"kailangan ng dahilan.\","," concurrentConflictMessage:"," \"Kababago lang ng entry na ito sa ibang lugar — na-reload na ang listahan; subukan ulit.\","," loadFlocksGradesFailed: \"Hindi na-load ang mga kawan/grado.\","," loadEntriesFailed: \"Hindi na-load ang mga entry.\","," \"Binago ng ibang tao ang entry na ito — ipinapakita na ngayon ng \""," nothingToAdjustMessage: \"{{status}} na ngayon ang entry na ito — wala nang puwedeng i-adjust.\","," conflictReloadFailedMessage:"," \"Binago ng ibang tao ang entry na ito at hindi na-reload ang \""," + \"listahan — i-reload ang page bago subukan ulit.\","," exceedsSellableMessage:"," \"Hindi puwedeng lumampas ang mga na-grade na dami sa kabuuang itlog na bawas ang basag/marumi/tinapon.\","," entryAdjustedMessage: \"Na-adjust ang entry — na-update ang stock at ang rekord ng manok para tumugma.\","," adjustReloadFailedMessage: \"Na-save ang pag-adjust, pero hindi na-reload ang listahan — i-refresh ang page.\","," voidConfirmTitle: \"I-void ang entry ng {{date}} para sa {{flock}}?\","," voidConfirmBody:"," \"Mawawalan ng laman ang mga lote ng itlog nito at mababaliktad ang \""," + \"mga namatay dito. Mananatiling Na-void ang entry. Tatanggihan \""," + \"kung nabenta na ang alinman sa mga itlog nito.\","," voidConfirmLabel: \"I-void ang entry\","," entryVoidedMessage: \"Na-void ang entry — nawalan ng laman ang mga lote ng itlog nito at nabaliktad ang mga namatay dito.\","," voidReloadFailedMessage: \"Na-save ang pag-void, pero hindi na-reload ang listahan — i-refresh ang page.\","," voidConflictMessage: \"Binago ng ibang tao ang entry na ito — na-reload na ang listahan; subukan ulit.\","," voidConflictReloadFailedMessage:"," + \"listahan — i-reload ang page.\","," loadMoreFailedMessage: \"Hindi na-load ang karagdagan.\","," allFlocksOption: \"Lahat ng kawan\","," // Adjust dialog"," adjustDialogTitle: \"I-adjust ang entry\","," adjustDialogTitleWithEntry: \"I-adjust — {{date}}, {{flock}}\","," previouslyAdjusted:"," \"Na-adjust na dati (kabuuan {{total}}, mortalidad {{mortality}} — \\\"{{reason}}\\\").\","," totalEggsLabel: \"Kabuuang itlog\","," dirtyLabel: \"Marumi\","," discardedLabel: \"Tinapon\","," deathsLabel: \"Namatay\","," inactiveGradeSuffix: \" (hindi aktibo)\","," saveAdjustmentButton: \"I-save ang pag-adjust\","," noEntriesMatch: \"Walang tugmang entry — magtala ng isa sa Daily entry page.\","," // Entries table"," // NOTE (flag for native review): \"cr/di/ds\" abbreviates the English"," // cracked/dirty/discarded; re-abbreviated here to the initials of the"," // Filipino words (basag/marumi/tapon → b/m/t) — confirm this reads"," // clearly as a table-header abbreviation."," lossesHeader: \"Nasira (b/m/t)\","," mortalityHeader: \"Mortalidad\","," gradedHeader: \"Na-grade\","," adjustButton: \"i-adjust\","," voidButton: \"i-void\","," // Entry-status pills"," statusVoided: \"Na-void\","," statusAdjusted: \"Na-adjust\","," statusLocked: \"Naka-lock\","," lockedAt: \"Naka-lock {{time}}\","," statusSubmitted: \"Naisumite\","," statusDraft: \"Draft\","," // Reports screen. Keys mirror en.ts reports exactly, including the"," // {{count}}/{{revenue}}/{{paid}}/{{outstanding}}/{{total}}/{{expenses}}/"," // {{profit}} placeholders and the tag in profitLine. \"Hen-days\" /"," // \"Hen-day %\" kept as English loanwords (technical poultry-industry"," // metric, no settled short Filipino term) — flag for native review, same"," // treatment as settings.timezoneLabel above. \"cost-of-goods\" /"," // \"inventory valuation\" in profitFootnote kept partially in English for"," // the same reason."," reports: {"," title: \"Mga Ulat\","," productionHeading: \"Produksyon\","," sellableHeader: \"Maibebenta\","," deathsHeader: \"Namatay\","," henDaysHeader: \"Hen-days\","," henDayPctHeader: \"Hen-day %\","," periodRowLabel: \"Panahon\","," gradeTotalsLabel: \"Ayon sa grado:\","," moneyHeading: \"Pera\","," salesRowLabel: \"Benta\","," salesSummary:"," \"{{count}} kumpirmadong order — kita {{revenue}}, nabayaran {{paid}}, nakabinbin {{outstanding}}\","," salesVoidedSuffix: \" ({{count}} na-void)\","," expensesRowLabel: \"Gastos\","," expensesNone: \"wala pang naitala\","," expensesTotalSuffix: \" — kabuuan {{total}}\","," profitRowLabel: \"Kita (payak)\","," profitLine: \"kita {{revenue}} − gastos {{expenses}} = {{profit}}\","," profitFootnote:"," \"Ang \\\"payak\\\" na kita ay ang nakumpirmang kita bawas ang mga \""," + \"naitalang gastos — walang cost-of-goods o valuation ng imbentaryo.\","," // machine-drafted (#182) — pending native review. Task 29 (B5): new"," // Audit screen. Keys mirror en.ts audit exactly (no placeholders in this"," // namespace — the action/entity table cells route through the already-"," // translated enums:auditAction./entityType. labels, not this"," // namespace). \"corrective\"/\"destructive\"/\"configuration\" kept as English"," // loanword adjectives in intro (matching the loanword-heavy register"," // elsewhere in this file, e.g. sales.confirmOrderButton); \"Audit Log\""," // kept as a loanword heading, same treatment as settings.localeLabel."," audit: {"," heading: \"Audit Log\","," \"Bawat corrective, destructive, o configuration na pagbabago — sino \""," + \"ang gumawa, kailan, at bakit. Isinusulat ang mga row kasabay ng \""," + \"pagbabago mismo at hindi na ito ine-edit pa.\","," actionFilterLabel: \"Aksyon\","," allActionsOption: \"Lahat ng aksyon\","," whenHeader: \"Kailan (UTC)\","," whoHeader: \"Sino\","," actionHeader: \"Aksyon\","," entityHeader: \"Entidad\","," reasonHeader: \"Dahilan\","," emptyMessage: \"Wala pang audit event.\","," // machine-drafted (#182) — pending native review. Task 30 (B5): new"," // Export screen. Keys mirror en.ts export exactly (no placeholders in"," // this namespace). The \"dataset.\" keys are DISPLAY labels for the"," // dataset picker (the wire value stays the raw slug) — translated to"," // natural Filipino per the task brief."," export: {"," heading: \"Export\","," \"I-download ang datos ng iyong account bilang mga CSV file — isang \""," + \"manual na backup na puwede mong itago kahit saan. Ang mga \""," + \"halagang pera ay ine-export sa minor units (sentimo) kasama ang \""," + \"currency nito, eksakto gaya ng pagkaka-save.\","," fullBackupHeading: \"Buong backup\","," fullBackupButton: \"I-download ang buong backup (zip)\","," fullBackupHint: \"Isang zip na may lahat ng dataset sa ibaba kasama ang manifest ng bilang ng row.\","," preparingButton: \"Naghahanda…\","," singleDatasetsHeading: \"Mga indibidwal na dataset\","," \"dataset.flocks\": \"Mga kawan\","," \"dataset.bird-movements\": \"Mga paggalaw ng manok\","," \"dataset.daily-entries\": \"Mga araw-araw na entry\","," \"dataset.daily-entry-grades\": \"Mga grado ng araw-araw na entry\","," \"dataset.egg-grades\": \"Mga grado ng itlog\","," \"dataset.egg-lots\": \"Mga lote ng itlog\","," \"dataset.customers\": \"Mga customer\","," \"dataset.sales-orders\": \"Mga order ng benta\","," \"dataset.sales-order-items\": \"Mga item ng order ng benta\","," \"dataset.sales-order-allocations\": \"Mga allocation ng order ng benta\","," \"dataset.payments\": \"Mga bayad\","," \"dataset.inventory-items\": \"Mga item sa imbentaryo\","," \"dataset.inventory-lots\": \"Mga lote ng imbentaryo\","," \"dataset.inventory-movements\": \"Mga paggalaw ng imbentaryo\","," \"dataset.feed-usages\": \"Mga paggamit ng feed\","," \"dataset.water-usages\": \"Mga paggamit ng tubig\","," \"dataset.expense-categories\": \"Mga kategorya ng gastos\","," \"dataset.expenses\": \"Mga gastos\","," \"dataset.egg-inventory-movements\": \"Mga paggalaw ng imbentaryo ng itlog\","," \"dataset.audit-events\": \"Mga audit event\","," // namespace, backfilling tl for the closed-vocabulary enum labels"," // (status/role/waterSource/waterUnit/gradeType/inventoryCategory/"," // inventoryMovement/flockMovement/stockMovement/unitSystem/weekday)"," // consumed through enums.ts, so Settings' unit-system/weekday pickers and"," // Users' role values render translated text too. Keys mirror en.ts enums"," // exactly (flat \"family.RawValue\" strings, keySeparator:false — see"," // en.ts's enums header comment). waterUnit.L/waterUnit.gal are left as the"," // literal unit symbols (unchanged across en/es/tl), matching en's own"," // comment."," // role.Admin/role.Manager/role.ReadOnly and a handful of inventory/stock"," // terms (gradeType.Custom, inventoryCategory.Packaging, stockMovement."," // Reconciliation) are kept as English loanwords — common register in PH"," // farm/business software, same treatment as sales.methodCash/methodCard"," // above; flagged for native review alongside role.Worker (\"Manggagawa\")"," // and role.Sales (\"Benta\", matching sales.title) which WERE translated."," enums: {"," // status"," \"status.Active\": \"Aktibo\","," \"status.Inactive\": \"Hindi Aktibo\","," \"status.Draft\": \"Draft\","," \"status.Submitted\": \"Naisumite\","," \"status.Locked\": \"Naka-lock\","," \"status.ManagerAdjusted\": \"Na-adjust\","," \"status.Voided\": \"Na-void\","," \"status.Confirmed\": \"Kumpirmado\","," \"status.Shipped\": \"Ipinadala\","," \"status.Invoiced\": \"Na-invoice\","," \"status.Cancelled\": \"Kinansela\","," \"status.Depleted\": \"Naubos\","," \"status.Archived\": \"Naka-archive\","," // role"," \"role.Worker\": \"Manggagawa\","," \"role.Admin\": \"Admin\","," \"role.Manager\": \"Manager\","," \"role.Sales\": \"Benta\","," \"role.ReadOnly\": \"Read-only\","," // water source"," \"waterSource.Well\": \"Poso\","," \"waterSource.Municipal\": \"Munisipal\","," \"waterSource.Tank\": \"Tangke\","," \"waterSource.Other\": \"Iba pa\","," // water unit — symbols, unchanged"," \"waterUnit.L\": \"L\","," \"waterUnit.gal\": \"gal\","," // grade type"," \"gradeType.Size\": \"Sukat\","," \"gradeType.Quality\": \"Kalidad\","," \"gradeType.Custom\": \"Custom\","," // inventory category"," \"inventoryCategory.Feed\": \"Feed\","," \"inventoryCategory.Supplement\": \"Suplemento\","," \"inventoryCategory.Additive\": \"Aditibo\","," \"inventoryCategory.Medication\": \"Gamot\","," \"inventoryCategory.Vaccine\": \"Bakuna\","," \"inventoryCategory.Packaging\": \"Packaging\","," \"inventoryCategory.Bedding\": \"Higaan\","," \"inventoryCategory.Sanitation\": \"Kalinisan\","," \"inventoryCategory.EquipmentPart\": \"Bahagi ng kagamitan\","," \"inventoryCategory.Other\": \"Iba pa\","," // inventory movement type"," \"inventoryMovement.Purchase\": \"Pagbili\","," \"inventoryMovement.Usage\": \"Paggamit\","," \"inventoryMovement.Adjustment\": \"Pagsasaayos\","," \"inventoryMovement.Discard\": \"Pagtapon\","," // flock (bird) movement type"," \"flockMovement.Mortality\": \"Pagkamatay\","," \"flockMovement.Cull\": \"Pagtanggal\","," \"flockMovement.Adjustment\": \"Pagsasaayos\","," // egg stock movement type"," \"stockMovement.Production\": \"Produksyon\","," \"stockMovement.Sale\": \"Benta\","," \"stockMovement.Adjustment\": \"Pagsasaayos\","," \"stockMovement.Discard\": \"Pagtapon\","," \"stockMovement.InternalUse\": \"Panloob na paggamit\","," \"stockMovement.Transfer\": \"Paglipat\","," \"stockMovement.Reconciliation\": \"Reconciliation\","," \"stockMovement.Void\": \"Na-void\","," // unit system"," \"unitSystem.Metric\": \"Metriko\","," \"unitSystem.Imperial\": \"Imperyal\","," // weekday"," \"weekday.Sunday\": \"Linggo\","," \"weekday.Monday\": \"Lunes\","," \"weekday.Tuesday\": \"Martes\","," \"weekday.Wednesday\": \"Miyerkules\","," \"weekday.Thursday\": \"Huwebes\","," \"weekday.Friday\": \"Biyernes\","," \"weekday.Saturday\": \"Sabado\","," // machine-drafted (#182) — pending native review. Task 29 (B5): audit"," // action + entity type labels for AuditPage. Keys mirror en.ts exactly"," // (flat \"auditAction.Entity.Verb\" / \"entityType.Value\" strings,"," // keySeparator:false — see en.ts's auditAction header comment)."," // \"Order\", \"User\", \"Account\", \"item\", and \"conversion\" kept as English"," // loanwords, matching the sales/users precedent above; \"kawan\" (flock),"," // \"gastos\" (expense), \"bayad\" (payment), \"produkto\" (product), \"itlog\""," // (egg), and \"imbentaryo\" (inventory) reuse the vocabulary already"," // established in the sales/users/expenses/customers namespaces."," \"auditAction.DailyEntry.Adjust\": \"Na-adjust ang araw-araw na entry\","," \"auditAction.DailyEntry.Void\": \"Na-void ang araw-araw na entry\","," \"auditAction.SalesOrder.Void\": \"Na-void ang order ng benta\","," \"auditAction.Payment.Void\": \"Na-void ang bayad\","," \"auditAction.Expense.Adjust\": \"Na-adjust ang gastos\","," \"auditAction.ExpenseCategory.Update\": \"Na-update ang kategorya ng gastos\","," \"auditAction.InventoryItem.Adjust\": \"Na-adjust ang item sa imbentaryo\","," \"auditAction.WaterUsage.Correct\": \"Naitama ang paggamit ng tubig\","," \"auditAction.Flock.BirdMovement\": \"Naitala ang paggalaw ng manok\","," \"auditAction.Flock.Update\": \"Na-update ang kawan\","," \"auditAction.Flock.Deplete\": \"Naubos ang kawan\","," \"auditAction.Flock.Archive\": \"Na-archive ang kawan\","," \"auditAction.Flock.Reactivate\": \"Na-reactivate ang kawan\","," \"auditAction.EggGrade.Update\": \"Na-update ang grado ng itlog\","," \"auditAction.EggGrade.Activate\": \"Na-activate ang grado ng itlog\","," \"auditAction.EggGrade.Deactivate\": \"Na-deactivate ang grado ng itlog\","," \"auditAction.User.Create\": \"Nagawa ang user\","," \"auditAction.User.Update\": \"Na-update ang user\","," \"auditAction.User.PasswordSet\": \"Naitakda ang password\","," \"auditAction.User.PasswordChanged\": \"Napalitan ang password\","," \"auditAction.User.BreakGlassReset\": \"Emergency na pag-reset ng password\","," \"auditAction.User.FlockAssign\": \"Na-assign ang kawan sa user\","," \"auditAction.User.FlockUnassign\": \"Na-unassign ang kawan mula sa user\","," \"auditAction.Account.Export\": \"Na-export ang datos\","," \"auditAction.Account.SetLogo\": \"Na-set ang logo ng bukid\","," \"auditAction.Account.RemoveLogo\": \"Naalis ang logo ng bukid\","," \"auditAction.Account.UpdateSettings\": \"Na-update ang mga setting ng bukid\","," \"auditAction.Product.Create\": \"Nagawa ang produkto\","," \"auditAction.Product.Update\": \"Na-update ang produkto\","," \"auditAction.Product.Activate\": \"Na-activate ang produkto\","," \"auditAction.Product.Deactivate\": \"Na-deactivate ang produkto\","," \"auditAction.EggUnitConversion.Update\": \"Na-update ang conversion ng yunit ng itlog\","," \"entityType.Account\": \"Account\","," \"entityType.DailyEntry\": \"Araw-araw na Entry\","," \"entityType.EggGrade\": \"Grado ng Itlog\","," \"entityType.EggUnitConversion\": \"Conversion ng Yunit ng Itlog\","," \"entityType.Expense\": \"Gastos\","," \"entityType.ExpenseCategory\": \"Kategorya ng Gastos\","," \"entityType.FarmLogo\": \"Logo ng bukid\","," \"entityType.Flock\": \"Kawan\","," \"entityType.InventoryItem\": \"Item sa Imbentaryo\","," \"entityType.Payment\": \"Bayad\","," \"entityType.Product\": \"Produkto\","," \"entityType.SalesOrder\": \"Order ng Benta\","," \"entityType.User\": \"User\","," \"entityType.WaterUsage\": \"Paggamit ng Tubig\","," // machine-drafted (#182) — pending native review. Task 32 (B6a): HelpPage"," // prose, getting-around through mistakes (INCLUDING the \"Fixing mistakes\""," // table). Keys mirror en.ts help exactly, including every /"," // tag — catalogParity enforces tag parity per key. Screen names in prose"," // reuse this pack's existing nav labels where one exists (e.g. \"History\","," // \"Stock\", \"Audit\", \"Export\" kept as English loanwords, \"Araw-araw na"," // Tala\" for Daily entry, \"Mga Kawan\" for Flocks) — see nav above."," // Domain-verb loanwords (\"i-void\", \"i-adjust\", \"isumite\", \"i-archive\","," // \"ubusin\"/\"naubos\", \"kumpirmahin\") follow the precedent set in"," // sales/history/flocks above. \"Currency\"/\"Time zone\"/\"Locale\"/\"Logo\"/"," // \"Account\"/\"Stock\"/\"History\"/\"Audit\"/\"Export\"/\"Glossary\" kept as English"," // loanwords, same treatment as settings/account above (flag for native"," // review). The glossary table (h3 id=\"glossary\") is translated separately,"," // near the end of this block (Task 33, B6b) — tocGlossary above is just"," // the rail's link text."," help: {"," eyebrow: \"Gabay ng user\","," heading: \"Tulong\","," lead: \"Kung paano gumagana ang Cluckwork, screen by screen — at kung paano mo aayusin ang mga pagkakamali.\","," contentsAriaLabel: \"Nilalaman ng tulong\","," contentsEyebrow: \"Nilalaman\","," tocGettingAround: \"Pag-navigate\","," tocSigningIn: \"Pag-sign in\","," tocDailyLoop: \"Ang pang-araw-araw na siklo\","," tocRoles: \"Sino ang puwedeng gumawa ng ano\","," tocDialogs: \"Pagdagdag at pagtatama\","," tocDailyEntry: \"Araw-araw na Tala\","," tocFlocks: \"Mga Kawan at Ibon\","," tocGrades: \"Mga Grado ng Itlog\","," tocProducts: \"Mga Produkto\","," tocStock: \"Stock\","," tocInventory: \"Feed at Imbentaryo\","," tocWater: \"Tubig\","," tocSales: \"Mga Customer at Benta\","," tocReports: \"Mga Report\","," tocExpenses: \"Mga Gastos\","," tocHistory: \"History\","," tocAudit: \"Audit Log\","," tocExport: \"Export at Backup\","," tocFarmSettings: \"Mga Setting ng Bukid\","," tocFarmPalette: \"Paleta ng Bukid\","," tocInstall: \"Pag-install sa Telepono\","," tocMistakes: \"Pagtatama ng mga Pagkakamali\","," tocGlossary: \"Glossary\","," gettingAroundHeading: \"Pag-navigate\","," gettingAroundSidebar:"," \"Sa computer, nasa sidebar sa kaliwa ang bawat screen, nakagrupo ayon sa trabaho.\","," gettingAroundTabs:"," \"Sa telepono, ang mga screen na pinakamadalas mong gamitin ay lumalabas bilang mga tab sa \""," + \"ibaba, malapit sa hinlalaki. Depende sa tungkulin mo kung alin sa apat ang makukuha mo — \""," + \"makukuha ng manggagawa ang Araw-araw na Tala, makukuha ng Benta ang Benta. Isang tap na lang ang \""," + \"lahat ng iba pa, sa ilalim ng Higit Pa.\","," gettingAroundErrorScreen:"," \"Kapag nagpakita ang isang screen ng \\\"May Nangyaring Mali\\\", ibig sabihin ay \""," + \"na-catch ng app ang isang error sa halip na mag-iwan sa iyo ng blangkong page. Ligtas ang anumang \""," + \"na-save mo na (maaaring kailanganin mong i-type ulit ang kahit anong tina-type mo pa) — i-tap ang \""," + \"I-reload, o Bumalik sa dashboard at subukan ulit. Kung \""," + \"paulit-ulit itong nangyayari, buksan ang \\\"Mga detalye ng error\\\" at magpadala ng screenshot.\","," signingInHeading: \"Pag-sign in\","," signingInBasic:"," \"Mag-sign in gamit ang email at password na ni-set up ng iyong administrator. Ang maling password ay \""," + \"nagsasabi lang na Mali ang email o password — subukan ulit.\","," signingInRateLimit:"," \"Para pabagalin ang sinumang nag-guess ng password, limitado ang mga pagsubok sa \""," + \"pag-sign in mula sa parehong lugar. Pagkatapos ng sobrang dami ng subok sa loob ng ilang minuto, \""," + \"makikita mo ang \\\"Sobra na ang subok sa pag-sign in\\\" — hindi iyon isang error, \""," + \"maghintay lang ng ilang minuto at subukan ulit. Hindi kailanman naaapektuhan ang pagiging naka-\""," + \"sign in na; normal na tumutuloy ang trabaho mo.\","," signingInAccountLock:"," \"Bukod dito, ang sobrang dami ng maling password para sa isang account ay panandaliang \""," + \"nagba-block sa account na iyon. Habang naka-block, kahit ang tamang password ay nagsasabi \""," + \"pa rin ng Mali ang email o password. Pansamantala lang ang block — maghintay ng \""," + \"hanggang 15 minuto at subukan ulit.\","," signingInPersistence:"," \"Ligtas na naka-save sa browser mo ang sign in mo at nananatiling aktibo habang nagtatrabaho ka, \""," + \"kahit mag-reload at kahit bukas ang app sa ilang tab nang sabay-sabay. \""," + \"Pagkatapos ma-update ang app, maaaring hilingin sa iyong mag-sign in muli — \""," + \"normal lang iyon.\","," // #308 (machine-drafted, pending native review)"," signingInStepUp:"," \"May dalawang aksyon sa Users screen na humihiling sa iyong muling ilagay ang \""," + \"kasalukuyan mong password mismo sa dialog: ang paggawa ng isa pang Owner, at ang pag-reset \""," + \"ng password ng isang umiiral na Owner. Kinukumpirma nito na ikaw talaga bago bigyan ng ganoong \""," + \"kalaking access — walang ibang aksyon sa screen na iyon (paggawa ng Worker/Manager/Sales/Read-only \""," + \"user, pag-reset ng password nila) ang muling nagtatanong.\","," interfaceLanguage:"," \"Wika ng interface. Kahit sino ay puwedeng pumili ng wikang gagamitin sa interface \""," + \"mula sa Account → Mga Kagustuhan — English, Español, o Tagalog. Isang patuloy na \""," + \"trabaho ang pagsasalin: ang mga screen ng sign-in at benta, ang mga error message, at ang \""," + \"Account → Mga Kagustuhan mismo ay isinalin na ngayon; ang natitirang bahagi ng \""," + \"Account screen (kasama ang password section) at ang natitirang app ay isinasalin pa nang screen by \""," + \"screen. Hangga't hindi pa naisasalin ang isang screen, ipinapakita lang ito sa English, anuman ang \""," + \"wikang pinili mo.\","," dailyLoopHeading: \"Ang pang-araw-araw na siklo\","," dailyLoopChain:"," \"Ang lahat sa Cluckwork ay nakasalalay sa iisang chain: nagtatala ka ng araw-araw na \""," + \"entry para sa bawat kawan (itlog ayon sa grado, nawala, namatay), isinusumite \""," + \"mo ito, at ang pagsumite ay lumilikha ng may petsang lote ng itlog — iyon ang iyong \""," + \"nabibiling stock. Ang isang order ng benta ay kumukuha mula sa \""," + \"stock kapag kinumpirma mo ito, palaging ang pinakalumang itlog muna. Gayon din ang daloy ng feed sa \""," + \"panig ng input: nagdadagdag ng feed sa stock ang mga pagbili, binabawasan ito ng araw-araw na \""," + \"paggamit kada kawan.\","," dailyLoopSummary: \"Magtala ng entry → isumite → lote ng itlog → stock → order → kumpirmahin.\","," rolesHeading: \"Sino ang puwedeng gumawa ng ano\","," rolesWorkers:"," \"Limang uri ng sign-in. Isinasagawa ng mga Manggagawa ang pang-araw-araw na siklo — \""," + \"nagtatala at nagsusumite ng entry, tumatanggap ng feed, nagtatala ng paggamit ng feed at tubig, \""," + \"gumagawa ng kawan at customer, humahawak ng order mula draft hanggang kumpirmasyon. Puwedeng \""," + \"limitahan ang isang manggagawa sa mga naka-assign na kawan: kung walang \""," + \"assignment, puwede siyang magtala para sa kahit anong kawan; ang unang assignment ang naglilimita \""," + \"sa kanya sa mga nakalista lang.\","," rolesManagers:"," \"Ginagawa ng mga Manager ang lahat ng ginagawa ng manggagawa, dagdag pa ang lahat \""," + \"ng nag-a-undo, nagtatama, o nag-co-configure: void, pagtatama ng stock at tubig, \""," + \"lifecycle ng kawan, pag-cull, ang mga katalogo ng grado/produkto/item, gastos, report ng pera, \""," + \"audit log, at export.\","," rolesSalesReadOnly:"," \"Hinahawakan ng mga sign-in na Benta ang customer, order, at bayad \""," + \"— pero walang production capture at walang gastos. Nakikita ng mga sign-in na Read-\""," + \"only ang stock, history, at report, at hindi puwedeng magbago ng anuman.\","," rolesAdmin:"," \"Ginagawa ng Admin (may-ari) ang lahat ng ginagawa ng manager at siya lang ang \""," + \"tungkuling namamahala ng mga user: gumagawa ng sign-in sa screen na Mga User \""," + \"(email, password, opsyonal na pangalan, at tungkulin) at nag-a-assign ng manggagawa sa mga kawan. \""," + \"Puwedeng baguhin sa ibang pagkakataon ang pangalan ng isang user mula sa aksyong \""," + \"i-edit ng row, at nagtatakda ang aksyong password ng nakalimutang \""," + \"password nang hindi kailangan ang luma. Ang pagbabago ng tungkulin ng isang existing na user ay \""," + \"darating sa susunod na release. Nakatago ang mga control na hindi mo puwedeng gamitin, at \""," + \"tinatanggihan pa rin ito ng server.\","," ownPassword:"," \"Ang sarili mong password. Kahit sino, sa kahit anong tungkulin, ay puwedeng \""," + \"magpalit ng sariling password sa screen na Account sa pamamagitan ng pag-enter ng \""," + \"kasalukuyan at bagong password (hindi bababa sa 12 karakter). Ang pagpapalit nito — o ang \""," + \"pagseset ng admin nito para sa iyo — ay nagsa-sign out sa account na iyon sa bawat ibang \""," + \"device; mananatiling naka-sign in ang device na pinagpalitan mo. Ang isang bukas nang session sa \""," + \"ibang lugar ay puwedeng magtagal ng ilang minuto bago tumigil sa paggana.\","," dialogsHeading: \"Pagdagdag at pagtatama\","," dialogsPopup:"," \"Nangyayari ang pagdadagdag at pagtatama sa isang popup. Hanapin ang button na Bago … \""," + \"sa tabi ng titulo ng screen — bagong grado, produkto, customer, kawan, item, user, order. Ang link \""," + \"na i-edit o tama ng bawat row ay nagbubukas ng parehong popup na \""," + \"may punan na ang mga value ng row na iyon.\","," dialogsDrillDowns:"," \"Gayon din ang mga drill-down. Buksan ang talaan ng ibon ng isang kawan para \""," + \"magtala ng cull, ang isang item sa imbentaryo para magtala ng pagbili, paggamit ng feed, o \""," + \"pagtatama ng stock, ang isang order para magtala ng bayad, o ang mga \""," + \"kawan ng isang manggagawa para pamahalaan ang access niya — nananatili sa lugar nito ang \""," + \"talaan at ang form na ang lalapit sa iyo.\","," dialogsCancel:"," \"Ang Kanselahin, Escape, o pag-click sa labas ay nagsasara ng popup, walang \""," + \"itinatala, at binubura ang na-type mo — kapag binuksan mong muli, blangko na ang form. Kung \""," + \"nabigo ang pag-save, mananatiling bukas ang popup na kasama ang mga value at ang dahilan mo, \""," + \"para maayos mo ito at subukan ulit — ligtas ang muling pagsubok, hindi ito kailanman nagtatala \""," + \"ng parehong bagay nang dalawang beses.\","," dialogsInlineForms:"," \"Ang mga screen na ang buong trabaho ay pagtatala ay pinapanatili ang form sa page mismo: \""," + \"Araw-araw na Tala, Tubig, pagtatala ng gastos, at pagdagdag ng \""," + \"linya sa isang draft na order. Ang mga ito ang ginagamit mo araw-araw — walang dagdag na click.\","," dialogsSteppers:"," \"Ang mga bilang na buong numero — bilang ng itlog, bilang ng ibon, dami ng benta, itlog bawat unit — \""," + \"ay may − at + na button na kasya sa hinlalaki: i-tap para sa isa, \""," + \"pindutin nang matagal para bumilis. Ang dami ng isang linya ng benta ay hindi \""," + \"bababa sa 1. Ang mga presyo at fractional na halaga ay tina-type pa rin.\","," dialogsConfirm:"," \"Nagtatanong muna ang mga aksyong hindi na maaaring i-undo. Ang pagsumite ng isang \""," + \"araw, pagkumpirma o pagkansela ng order, pag-ubos o pag-archive ng kawan — sinasabi ng bawat isa \""," + \"kung ano ang malapit nang mangyari at naghihintay. Nagsisimula ang keyboard sa \""," + \"Kanselahin, para hindi tuluyang tumuloy ang pagpindot ng Enter dahil sa ugali. \""," + \"Ang pulang button ay nangangahulugang ini-undo o inaalis ng aksyon ang isang \""," + \"bagay: pag-void, pagkansela ng draft, pag-ubos, pag-archive. Ang pagsumite ng isang araw at \""," + \"pagkumpirma ng order ay hindi rin puwedeng i-undo, pero ito ang normal na paraan sa buong linggo.\","," dialogsVoidReason:"," \"Kailangan ng dahilan ang mga void. Ang pag-void ng isang araw-araw na entry, isang \""," + \"bayad, o isang nakumpirmang order ay nagtatanong sa parehong paraan pero humihiling muna ng \""," + \"nakasulat na dahilan — naitatala ito kasama ang void at ipinapakita saanman lumabas ang rekord na \""," + \"iyon pagkatapos, kaya isulat kung ano talaga ang nangyari. Iwanan itong blangko at sasabihin agad \""," + \"ito ng popup, pinapanatili ang anumang na-type mo na.\","," dailyEntryHeading: \"Araw-araw na Tala\","," dailyEntryPanes:"," \"Piliin ang kawan at petsa sa itaas, pagkatapos ay magtrabaho sa dalawang panel nang magkatabi: \""," + \"1 Bilang ng itlog (kabuuan, basag, marumi, tinapon, namatay) at 2 \""," + \"Pag-grade. Ang mga bilang ay lumilikha ng isang naibibentang figure, at \""," + \"iyon ang numerong dapat abutin ng mga grado — hindi ito puwedeng lampasan kailanman.\","," dailyEntryGradingDown:"," \"Bumababa ang bilang sa pag-grade. Sa tabi ng mga grado ay makikita kung ilang \""," + \"naibibentang itlog pa ang kailangan mong ilagay; nagiging berde ito sa sandaling tumugma ang araw \""," + \"at pula kung lumagpas ka. Hindi ka puwedeng magsumite habang lumalagpas ito.\","," dailyEntryButtons:"," \"May mga button na − at + ang bawat bilang. I-tap para sa isa, o \""," + \"i-hold — bumibilis ito habang tumatagal, kaya ilang daang itlog ay tumatagal lang \""," + \"ng isang segundo. Mas madali kaysa sa keypad kapag naka-guwantes. Huminto ang + ng \""," + \"isang grado kapag kumpleto na ang pag-grade sa araw, para hindi ka lumampas dito.\","," dailyEntryPutAllIn:"," \"Karamihan sa mga araw ay natatapos sa parehong paraan — isang grado na lang ang kumukuha ng \""," + \"natitira. Ginagawa ito sa isang galaw ng Ilagay lahat sa… sa tabi ng natitirang \""," + \"bilang: i-drag ito papunta sa isang grado, o i-tap ito at pumili ng isa.\","," dailyEntrySaveBar:"," \"Nananatili ang dalawang save button sa isang bar sa ibaba ng screen habang nag-scroll ka. Sa \""," + \"telepono, ipinapakita rin ng bar na iyon ang naibibentang bilang at kung ilan pa ang natitira, \""," + \"para hindi ka kailanman mawalan ng tingin kung tumutugma ang araw.\","," dailyEntrySaveSubmit:"," \"Pinapanatiling editable ang araw ng I-save ang draft. Ginagawa itong opisyal ng \""," + \"Isumite: nililikha nito ang mga lote ng itlog ng araw at itinatala ang namatay sa \""," + \"talaan ng ibon ng kawan. Hindi na ito puwedeng i-edit ng manggagawa — puwede itong i-adjust o \""," + \"i-void ng admin (tingnan ang \\\"Pagtatama ng mga Pagkakamali\\\").\","," dailyEntryLocking:"," \"Awtomatikong naka-lock ang mga naisumiteng entry pagkalipas ng 7 araw. Ang pagiging \""," + \"naka-lock ay nangangahulugan lang na lumipas na ang correction window para sa mga karaniwang ayos \""," + \"— gumagana pa rin ang pag-adjust/void ng admin sa mga naka-lock na entry.\","," dailyEntryToday:"," \"Ang ibig sabihin ng \\\"Ngayon\\\" ay ang ngayon ng bukid mo, hindi ang oras sa ibang \""," + \"bahagi ng mundo. Puwede kang magtala ng kahit anong araw hanggang at kasama ito; tatanggihan ang \""," + \"isang araw na hindi pa nangyayari sa bukid — dito at sa lahat ng lugar na naglalagay ka ng petsa: \""," + \"paggamit ng feed at tubig, pagbili ng feed at pagtatama ng stock, gastos, bayad, at petsa ng \""," + \"paglagay ng kawan. Ang parehong petsa ang nagdedesisyon kung kailan lumalabas ang itlog sa isang \""," + \"withdrawal period, kung anong itlog ang puwedeng kunin ng isang benta, ang araw ng pag-ubos o \""," + \"pag-archive ng isang kawan, at ang range na binubuksan ng mga report — para walang hindi \""," + \"magkatugmang araw.\","," dailyEntryOnePerDay:"," \"Isang entry kada kawan kada araw. Ang muling pagbukas ng isang araw na may draft ay nagloload nito \""," + \"para sa pag-edit at nagpapakita ng badge na Ina-edit ang draft sa tabi ng titulo, \""," + \"para hindi kailanman kamukha ng pagsisimula mula sa wala ang pagbabalik sa na-save na trabaho. \""," + \"Kung nabigo ang prefill, naka-block ang pag-save hanggang magtagumpay ito, para hindi kailanman \""," + \"ma-overwrite nang tahimik ang isang existing na draft.\","," dailyEntryDepletedBackfill:"," \"Tumatanggap ang mga naubos na kawan ng backfilled na entry hanggang sa petsa ng pag-ubos nila; \""," + \"walang tinatanggap ang mga naka-archive na kawan.\","," flocksHeading: \"Mga Kawan at Ibon\","," flocksCurrentBirds:"," \"Ang kasalukuyang ibon ng isang kawan = ang paunang bilang nito bawas ang lahat sa \""," + \"talaan ng ibon nito: namatay (awtomatikong idinaragdag kapag naisumite ang mga \""," + \"entry), cull (sadyang inalis na ibon — naibenta, pinatay, ibinigay), at manual na \""," + \"adjustment (pagtatama ng bilang, sa kahit anong direksyon).\","," flocksLifecycle:"," \"Lifecycle: Aktibo (normal) → Naubos (wala nang ibon; nananatili \""," + \"ang history, pinapayagan ang backfill) → Naka-archive (nakatago mula sa \""," + \"pang-araw-araw na trabaho). Humihingi ng kumpirmasyon ang pag-ubos at pag-archive; parehong \""," + \"puwedeng i-reverse gamit ang Reactivate.\","," flocksPermissions:"," \"Kahit sino ay puwedeng gumawa ng kawan at tumingin sa talaan ng ibon. Ang pag-edit ng kawan, mga \""," + \"pagbabago sa lifecycle, at pagtatala ng cull/adjustment ay para sa admin lang.\","," gradesHeading: \"Mga Grado ng Itlog\","," gradesBuckets:"," \"Ang mga grado ang mga grading bucket ng bukid mo — sukat (Malaki…), kalidad (Basag…), o custom. \""," + \"Ang mga grado lang na nabibili ang lumalabas sa pagtatala ng entry at sa mga \""," + \"order; ang mga hindi nabibiling bucket ay para sa bookkeeping.\","," gradesDeactivating:"," \"Hindi kailanman binubura ang mga grado. Ang Pag-deactivate ay nag-aalis ng isang \""," + \"grado sa pagtatala at sa mga picker ng order: patuloy na binibilang ang stock nito at puwede pa \""," + \"ring kumpirmahin ang mga linya ng order na naidagdag na noon, pero hindi na ito puwedeng ilagay sa \""," + \"bagong linya ng order — i-reactivate ang grado para ibenta ang natitirang stock. Patuloy \""," + \"na ipinapakita ng history ang pangalan nito.\","," gradesAdminOnly: \"Configuration ang katalogo ng grado — ang pamamahala nito ay para sa admin lang.\","," productsHeading: \"Mga Produkto (admin)\","," productsWhatYouSell:"," \"Ang mga produkto ang ibinebenta mo — \\\"Malalaking Itlog kada dosena\\\", \\\"Halong karton\\\". Ang \""," + \"bawat produktong itlog ay tumuturo sa isang grado ng itlog (doon nanggagaling ang stock nito) at \""," + \"may dalang selling unit at opsyonal na default na presyo. Mga produktong itlog lang ang mayroon \""," + \"sa ngayon.\","," productsPackedUnits:"," \"Ang mga packed unit ang nagtatakda kung ilang itlog ang laman ng bawat unit — \""," + \"puwedeng 12, 18, o 30 ang karton mo. Ang pagbabago ng isang unit ay nakakaapekto lang sa mga \""," + \"hinaharap na benta; pinapanatili ng mga lumang order ang bilang na ibinenta sa kanila.\","," stockHeading: \"Stock\","," stockLots:"," \"Ang bawat grado ay lumalawak sa mga lote nito (isa kada naisumiteng araw), at ang \""," + \"bawat lote naman ay lumalawak sa talaan ng galaw nito — isang malinaw na linya \""," + \"para sa bawat production, benta, pagtatama, o void. Palaging katumbas ng balanseng ipinapakita ang \""," + \"tumatakbong kabuuan; walang nagbabago sa stock nang hindi nag-iiwan ng linya.\","," stockRestricted:"," \"Ang stock ay ang kabuuan ng mga lote ng itlog mo kada grado. Ang column na \""," + \"restricted ay nakalaan para sa mga withholding period ng gamot — darating ang \""," + \"feature na iyon kasama ng medication tracking. Wala pang minamarkahang restricted na \""," + \"itlog, kaya hindi ipinapatupad ng system ang mga withdrawal time sa ngayon — pamahalaan \""," + \"ang mga withholding period sa labas ng Cluckwork sa ngayon.\","," stockFifo: \"Palaging kinukuha muna ng pagbebenta ang mga pinakalumang lote, para natural na umiikot ang stock.\","," inventoryHeading: \"Feed at Imbentaryo\","," inventoryItems:"," \"Tinutukoy ng mga item kung ano ang tinatrack mo (feed, supplement…) at ang unit na \""," + \"sinusukat dito. Naka-lock ang unit sa sandaling natanggap na ang stock — dapat manatiling ang ibig \""," + \"sabihin ng mga nakatalang dami ang dating ibig sabihin nito.\","," inventoryPurchaseUsage:"," \"Ang Itala ang pagbili ay nagtatala ng natanggap na stock bilang isang may petsang \""," + \"lote na may kasamang gastos. Ang Itala ang paggamit ay nagtatala kung ano ang \""," + \"kinain ng isang kawan sa isang araw: kumukuha ito mula sa mga pinakalumang lote muna (mga lote \""," + \"lang na umiiral noong petsang iyon) at tinatantya ang gastos mula sa mga aktwal na lote na nagamit.\","," inventoryLedger:"," \"Napupunta ang bawat pagbabago sa talaan ng galaw ng item — pagbili, paggamit, \""," + \"pagtatama. Hindi kailanman ine-edit o binubura ang mga row ng talaan.\","," inventoryCorrections:"," \"Inaayos ang mga typo at pagkasira gamit ang mga pagtatama: isang Adjustment \""," + \"(kahit anong direksyon) o isang Discard (write-off) laban sa isang tiyak na lote, laging \""," + \"may dahilan. Nananatiling nakikita ang orihinal na row at ang pagtatama.\","," inventoryPermissions:"," \"Bukas sa lahat ang pagtatala ng pagbili at paggamit; ang katalogo ng item at mga pagtatama ng \""," + \"stock ay para sa admin lang.\","," waterHeading: \"Tubig\","," waterRecording:"," \"Itala kung ano ang ininom ng bawat kawan kada araw: alinman sa direktang dami (litro o galon) o \""," + \"mga reading ng metro — ang dami ay ang pagkakaiba ng metro (katapusan − simula).\","," waterCorrecting:"," \"Walang stock sa likod ng mga rekord ng tubig, kaya inaayos ang mga pagkakamali sa pamamagitan ng \""," + \"direktang pagtatama sa rekord (ang button na \\\"tama\\\", para sa admin lang) — \""," + \"walang compensating entry. Naka-fix ang kawan at petsa: kung mali ang napili, itala ito ulit sa \""," + \"tamang isa.\","," waterLifecycle:"," \"Parehong panuntunan ng lifecycle gaya ng lahat ng lugar: tumatanggap ang mga naubos na kawan ng \""," + \"backfill hanggang sa petsa ng pag-ubos nila, walang tinatanggap ang mga naka-archive.\","," salesHeading: \"Mga Customer at Benta\","," salesDrafts:"," \"Nagsisimula ang mga order bilang draft: magdagdag ng linya sa pamamagitan ng \""," + \"pagpili ng produkto, isang packed unit (dosena, karton, …), isang dami, at isang \""," + \"presyo kada unit (naka-prefill mula sa default ng produkto) — i-edit nang malaya, o \""," + \"kanselahin (mananatili ang draft, read-only). Naaalala ng bawat linya kung ilang \""," + \"itlog ang laman ng unit nito noong idinagdag ito, kaya hindi kailanman binabago ng muling \""," + \"pagtukoy sa isang karton ang mga lumang order.\","," salesConfirming:"," \"Ang Pagkumpirma ng isang order ay naglalaan ng aktwal na stock — pinakalumang lote \""," + \"muna — at ito ang sandali kung saan lumilipat ang inventory.\","," salesVoiding:"," \"Ang isang maling kumpirmasyon ay ina-undo gamit ang Void (admin lang, kailangan ng \""," + \"dahilan): bumabalik ang mga itlog sa eksaktong lote na pinagmulan nila, at mananatiling nakalista \""," + \"bilang Na-void ang order. Ang pag-void ay para sa mga pagkakamali, hindi para sa mga pagsauli ng \""," + \"naihatid na paninda. (Ang mga order na nakumpirma bago pa magkaroon ng lot-level allocation \""," + \"tracking ay hindi puwedeng i-void nang mag-isa — magtanong sa administrator mo.)\","," salesPayments:"," \"Mga Bayad (Benta, Manager, o admin — ang pag-void ng isang bayad ay para sa \""," + \"admin/manager lang): ipinapakita ng panel ng isang nakumpirmang order ang settlement history nito \""," + \"— magtala ng bahagyang bayad (petsa, halaga, paraan, opsyonal na reference) hanggang umabot sa \""," + \"zero ang natitirang halaga; tinatanggihan ang overpayment. Ang isang maling bayad ay \""," + \"ina-void (kailangan ng dahilan) at tumataas muli ang natitirang halaga. Ang isang \""," + \"order na may bayad ay hindi puwedeng i-void hangga't hindi pa na-void ang mga bayad nito. \""," + \"Ipinapakita ng Customers page ang natitirang balanse ng bawat customer.\","," reportsHeading: \"Mga Report\","," reportsProduction:"," \"Production (lahat): pumili ng date range — itlog kada araw, nawala, naibibenta, \""," + \"namatay, at hen-day % (itlog na nakolekta ÷ ibong buhay sa araw na iyon × 100), \""," + \"may kasamang period total at breakdown kada grado. Hindi binibilang ang draft at na-void na entry.\","," reportsMoney:"," \"Pera (admin): buod ng benta para sa mga order ng range (kita / nabayaran / \""," + \"natitira), gastos kada kategorya, at basic profit — nakumpirmang kita bawas ang \""," + \"nakatalang gastos, walang cost-of-goods.\","," expensesHeading: \"Mga Gastos (admin)\","," expensesRecording:"," \"Itala ang lumalabas na pera: petsa, kategorya, deskripsyon, at halaga (sa currency ng bukid), \""," + \"opsyonal na naka-link sa isang kawan. Ipinapakita ng month picker ang tumatakbong total; \""," + \"pinapamahalaan ang mga kategorya sa parehong screen (ang pag-deactivate ng isa ay nagtatago nito \""," + \"mula sa mga bagong gastos — pinapanatili ito ng mga naitala na).\","," expensesCorrections:"," \"Ine-edit ng mga pagtatama ang gastos sa lugar nito (tama sa row). Kung may ibang \""," + \"tao na nagtama nito muna, nire-reload ng form ang mga value nila at hinihiling sa iyong mag-apply \""," + \"ulit. Hindi kailanman nagbabago ang currency na kinatalaan ng isang gastos.\","," expensesAdminOnly:"," \"Data ng pera ang mga gastos, kaya ang buong screen — kasama ang pagtingin — ay para sa admin lang, \""," + \"hindi tulad ng mga production screen kung saan nagtatala ang manggagawa.\","," historyHeading: \"History\","," historyBrowse:"," \"Tumingin sa mga naitalang araw-araw na entry, pinakabago muna, na-filter kada kawan at date range. \""," + \"Ipinapakita ng status column ang buhay ng entry: Draft, Naisumite, Naka-lock (7+ araw na), \""," + \"Na-adjust (i-hover para sa dahilan), o Na-void.\","," historyAdminActions:"," \"Nagtatama ang mga admin mula rito: binubuksan ng i-adjust ang mga numero ng entry \""," + \"para sa pag-edit (kailangan ng dahilan), ina-undo ng i-void ang buong entry. \""," + \"Awtomatikong sumusunod ang stock at ang talaan ng ibon.\","," historyDraftEdit:"," \"May link na i-edit ang mga row na draft (lahat, hindi lang admin) na tumatalon \""," + \"pabalik sa screen na Araw-araw na Tala na may kasamang kawan at araw na iyon — doon ine-edit ang \""," + \"mga draft, hindi ina-adjust.\","," auditHeading: \"Audit Log (admin)\","," auditLog:"," \"Ang bawat corrective, destructive, o configuration na pagbabago ay napupunta sa audit log nang \""," + \"awtomatiko: sino ang gumawa nito, kailan (UTC), ano ang naapektuhan, at ang dahilan kung mayroon. \""," + \"Isinusulat ito kasabay ng pagbabago mismo — walang naiiwang bakas ang isang nabigong aksyon, \""," + \"palaging may naiiwan ang isang matagumpay — at hindi kailanman ine-edit, ng kahit sino.\","," exportHeading: \"Export at Backup (admin)\","," exportCsv:"," \"Ida-download ng Export screen ang data mo bilang mga CSV file na puwede mong buksan sa kahit anong \""," + \"spreadsheet — isang dataset sa isang pagkakataon, o lahat nang sabay bilang isang zip (ang \""," + \"buong backup, may kasamang manifest ng bilang ng row). Magtago ng kopya sa ligtas \""," + \"na lugar ayon sa sarili mong schedule; darating ang mga automatic na scheduled backup sa susunod \""," + \"na phase.\","," exportFormats:"," \"Naglalaman ang mga column ng pera ng minor unit (sentimo) kasama ang currency — eksaktong halaga, \""," + \"hindi display formatting. ISO ang mga petsa (YYYY-MM-DD), at UTC ang mga timestamp.\","," farmSettingsHeading: \"Mga Setting ng Bukid (admin)\","," farmSettingsIntro:"," \"Nasa Setup → Mga Setting ng Bukid ang pangalan ng bukid at ang apat na bagay na \""," + \"nagdedesisyon kung paano babasahin ang lahat: time zone, locale, \""," + \"currency, at unit system. Opsyonal ang unang araw ng linggo at ang \""," + \"mga format ng petsa at oras — iwanan itong blangko at ang locale ang magdedesisyon. Agad na \""," + \"kumikilos ang time zone sa lahat ng lugar sa sandaling ma-save ito; naitatala ang iba pa laban sa \""," + \"bukid at magtatakda kung paano ipapakita ang mga halaga, petsa, at sukat kapag dumating na ang \""," + \"formatting na iyon.\","," farmSettingsTimezone:"," \"Ang time zone ang araw ng bukid. Ang bawat field na nagtatala ng kung kailan \""," + \"nangyari ang isang bagay — araw-araw na entry, kawan, tubig, paggamit at pagbili ng feed, \""," + \"gastos, order at bayad — ay bumubukas dito at tumatanggi lumampas dito, anuman ang araw sa \""," + \"telepono o laptop na hawak mo, para hindi na makapag-alok ang isang device na nauuna sa bukid ng \""," + \"petsang tatanggihan din naman ng pag-save. Ang mga petsang nakatakdang mangyari sa hinaharap ay \""," + \"walang cap: ang expiry ng isang lote ng feed, at ang mga date range na ginagamit \""," + \"mo para i-filter ang History at Tubig.\","," farmSettingsCurrency:"," \"Naka-lock ang currency sa sandaling itala ng bukid ang una nitong halaga — isang \""," + \"benta, isang bayad, isang gastos, isang produktong may presyo, o perang ginastos sa feed. \""," + \"Ipinapakita ang field na naka-lock kasama ang dahilan sa halip na hayaan kang mag-type ng code na \""," + \"tatanggihan naman. Hindi na muling pinepresyuhan ang anumang naitala na, kaya naman ito naka-lock.\","," farmSettingsLogo:"," \"Pinapalitan ng logo ang Cluckwork mark sa sidebar para sa lahat sa bukid. PNG, \""," + \"JPEG, o WebP, hanggang sa size limit na ipinapakita sa screen (2 MB bilang default) at 4096 pixel \""," + \"kada gilid. Tinatanggihan ang mga animated na larawan sa halip na patagin ito. Isang muling \""," + \"ginawang kopya ang na-save: tinatanggal ang mga detalye ng camera at lokasyon papasok — ang isang \""," + \"larawang kinunan sa telepono ay may kasamang kung saan ito kinuha, at para sa isang bukid, iyon \""," + \"ang address nito. Alisin ito at babalik ang sidebar sa Cluckwork mark.\","," farmSettingsSquareLogo:"," \"Gumamit ng parisukat na logo. Maliit itong lumalabas sa sidebar, kaya isang simple \""," + \"at maigsing-crop na marka — isang simbolo o iisang letra — ang mas magandang tingnan doon kaysa \""," + \"sa isang malawak na wordmark o isang detalyadong larawan, na bumabagsak sa isang bagay na hindi na \""," + \"mabasa. Panatilihin ang isang detalyadong logo para sa print o isang website; bigyan ang app ng \""," + \"isang malinis na maliit na marka.\","," farmPaletteHeading: \"Paleta ng Bukid\","," farmPaletteIntro:"," \"Ang mga setting ng bukid ay nagpapahintulot sa isang admin na pumili ng accent color na ginagamit \""," + \"sa buong app para sa lahat sa bukid: Talong, Kagubatan, Slate, o Terracotta. Naaaplay ang pinili \""," + \"kapag nag-save ka, at nakikita ito ng lahat sa susunod na pag-load ng app nila.\","," farmPaletteLightNight:"," \"Magkahiwalay at personal ang light mode at night mode. Pumipili ang bawat tao ng sarili nila gamit \""," + \"ang toggle sa sidebar, sa bawat device, at hindi kailanman ino-override ito ng paleta ng bukid — \""," + \"dinisenyo ang bawat paleta para gumana sa pareho.\","," installHeading: \"Pag-install sa Telepono\","," installIntro:"," \"Puwedeng idagdag ang Cluckwork sa home screen ng isang telepono o tablet, kung saan makukuha nito \""," + \"ang sariling icon at magbubukas sa sariling window nang walang browser bar — mas maraming espasyo \""," + \"para sa mga entry screen at mas mabilis na maabot sa kulungan. Parehong app pa rin ito, hindi \""," + \"hiwalay na download, kaya walang kailangang i-update mula sa isang app store.\","," installSteps:"," \"Android (Chrome): buksan ang menu at piliin ang I-install ang app o \""," + \"Idagdag sa Home Screen. iPhone/iPad (Safari): i-tap ang \""," + \"Share, pagkatapos ay Idagdag sa Home Screen.\","," installHttps:"," \"Inaalok lang ang pag-install sa isang secure (https) address. Kung naaabot ng \""," + \"bukid mo ang Cluckwork sa isang plain na http, hindi lang lalabas ang opsyon — \""," + \"walang sira, at gumagana pa rin ang app nang eksakto tulad ng sa browser.\","," installOffline:"," \"Hindi ginagawang offline ang app ng pag-install. Kailangan pa rin nito ng koneksyon \""," + \"para mag-load at mag-save; ang mga screen lang ng app mismo ang naka-save sa device para mabilis \""," + \"itong magsimula. Nakaplano pang trabaho ang pagtatala habang offline, hindi isang bagay na \""," + \"binubuksan ng pag-install.\","," installNewVersion:"," \"Kapag may binagong bersyon, makikita mo ang \\\"May bagong bersyon ng Cluckwork na handa \""," + \"na\\\". Hinihintay ka nito sa halip na mag-reload habang nagta-type ka — pindutin ang \""," + \"I-reload kapag maganda ang timing mo, o Mamaya at magtatanong \""," + \"ulit ito sa susunod. Walang mawawala sa pag-iwan nito.\","," mistakesHeading: \"Pagtatama ng mga Pagkakamali\","," mistakesIntro:"," \"Kailangan ng sign-in ng admin ang bawat ayos sa talahanayang ito (tingnan ang \\\"Sino ang puwedeng \""," + \"gumawa ng ano\\\") — nagtatala ang manggagawa, nagtatama ang admin. Ang isang eksepsiyon: nagtatala \""," + \"pa rin ang isang draft, hindi nagtatama, kaya ine-edit ng manggagawa ang sarili nilang \""," + \"draft.\","," mistakesTableMistakeHeader: \"Pagkakamali\","," mistakesTableFixHeader: \"Ayos\","," mistakesRow1Mistake: \"Naubos o na-archive ang maling kawan\","," mistakesRow1Fix: \"Mga Kawan → Reactivate (buong ma-rereverse)\","," mistakesRow2Mistake: \"Maling bilang ng ibon\","," mistakesRow2Fix: \"Mga Kawan → talaan ng ibon → Adjustment (kahit anong direksyon)\","," mistakesRow3Mistake: \"Nakumpirma ang maling order ng benta\","," mistakesRow3Fix:"," \"Benta → buksan ang order → I-void ang order (babalik ang stock sa mga lote nito; \""," + \"kailangan ng dahilan). Kung may naitalang bayad dito, i-void muna iyon.\","," mistakesRow4Mistake: \"Naitalang maling bayad\","," mistakesRow4Fix:"," \"Benta → buksan ang order → mga bayad → i-void (kailangan ng dahilan): mananatili \""," + \"ang row at tataas muli ang natitirang halaga.\","," mistakesRow5Mistake: \"Maling dami sa isang pagbili ng feed / nasirang feed\","," mistakesRow5Fix:"," \"Imbentaryo → buksan ang item → I-tama ang stock (Adjustment o Discard laban sa \""," + \"lote; kailangan ng dahilan). Mga dami lang ang puwedeng itama — hindi pa puwedeng ayusin ang \""," + \"maling gastos, petsa, o numero ng lote, kaya siguraduhin muna ang mga iyon bago mag-save.\","," mistakesRow6Mistake: \"Sobra o kulang ang naitalang paggamit ng feed\","," mistakesRow6Fix:"," \"Parehong form ng pagtatama: ibinabalik ng isang positibong Adjustment sa lote ang labis na nagamit \""," + \"na stock (hanggang sa natanggap nito); inaalis naman ng negatibong isa ang kulang na naitalang \""," + \"stock. Nananatiling nakatala ang rekord ng paggamit mismo at ang tantiya ng gastos nito — \""," + \"inaayos ng mga pagtatama ang stock, hindi ang history.\","," mistakesRow7Mistake: \"Maling rekord ng tubig\","," mistakesRow7Fix:"," \"Tubig → tama sa rekord — nae-edit sa lugar nito ang dami, source, metro, at tala \""," + \"(walang stock sa likod ng tubig). Naka-fix ang kawan at petsa: kung mali ang napili, itala ito \""," + \"ulit sa tamang isa.\","," mistakesRow8Mistake: \"Maling numero sa isang naisumiteng araw-araw na entry\","," mistakesRow8Fix:"," \"History → i-adjust (admin) — kabuuan, nawala, mortality, at hati ng grado, may \""," + \"kasamang kinakailangang dahilan. Awtomatikong tumutugma ang stock at ang talaan ng ibon, pero \""," + \"hindi na kailanman puwedeng bawasan ang mga itlog na nabenta na: tinatanggihan ang pagbawas ng \""," + \"isang grado sa ibaba ng nabenta na. Nananatiling nakikita ang mga naunang value sa entry.\","," mistakesRow9Mistake: \"Ang buong naisumiteng entry ay mali (maling kawan o araw)\","," mistakesRow9Fix:"," \"History → i-void (admin, kailangan ng dahilan): nawawalan ng laman ang mga lote ng \""," + \"itlog nito, ibinabalik ang mga namatay sa talaan ng ibon, at nananatiling Na-void ang entry. \""," + \"Tinatanggihan kung nabenta na ang alinman sa mga itlog nito — i-void muna ang benta. Pinapalaya \""," + \"ng pag-void ang araw: puwede nang itala ang tamang entry para sa parehong kawan at petsa.\","," mistakesRow10Mistake: \"Pagkakamali sa isang entry o order na draft\","," mistakesRow10Fix:"," \"I-edit ito — nae-edit ang lahat: mga numero ng draft, linya ng grado, at linya ng order (mga draft \""," + \"na entry: History → i-edit tumatalon sa screen na Araw-araw na Tala na may \""," + \"kasamang araw). Naka-fix pa rin ang kawan/petsa ng isang entry at ang customer/petsa ng isang \""," + \"order: kung mali ang napili, itala na lang ito ulit sa tamang isa (at kanselahin ang maling draft \""," + \"na order).\","," // machine-drafted (#182) — pending native review. Task 33 (B6b): the"," // glossary table (37 rows) + closing repo-note. Keys and tags mirror"," // en.ts exactly — catalogParity enforces key-set and tag parity."," // Domain nouns follow this pack's existing loanword precedent seen"," // above (Stock, Currency, FIFO, Packed unit, Adjustment, Discard,"," // Navigation, Cull, Mortality, Deplete, Archive kept English;"," // void/confirm/cancel/adjust/reactivate as the established"," // i-void/kumpirmahin/kanselahin/i-adjust/i-reactivate verb loanwords)."," // The \"specs/product/GLOSSARY.md\" path inside glossaryRepoNote's "," // tag is kept literal (untranslated), per the Task 33 brief."," glossaryHeading: \"Glossary\","," glossaryNavigationTerm: \"Navigation\","," glossaryNavigationDef:"," \"Nasa sidebar sa kaliwa ang mga screen sa computer; sa telepono, ang apat na pinakamadalas mong \""," + \"gamitin ay mga tab sa ibaba, at ang iba pa ay nasa ilalim ng More.\","," glossaryOperationalDayTerm: \"Araw ng operasyon\","," glossaryOperationalDayDef:"," \"Ang petsa ay ang araw sa kalendaryo ng iyong bukid, batay sa sariling time zone ng bukid at hindi \""," + \"sa relong nasa ibang lugar. Ito ang parehong \\\"ngayon\\\" saanman: kung ano ang bilang na petsang \""," + \"darating kapag nagtatala ka ng trabaho, kailan aalis ang itlog sa withdrawal period, kung aling \""," + \"itlog ang puwedeng kunin ng isang benta, ang araw na na-deplete o na-archive ang isang kawan, at \""," + \"ang range na binubuksan ng mga report. Bawat field na nagtatala kung KAILAN NANGYARI ANG ISANG \""," + \"BAGAY ay nagbubukas dito at hindi ito lalagpasan, kahit anong araw ang nasa device mo. Hindi \""," + \"limitado ang mga petsang dapat mahulog sa hinaharap — ang expiry ng isang batch ng feed, at ang \""," + \"mga filter ng History at Tubig.\","," glossaryInstallToHomeScreenTerm: \"Pag-install sa home screen\","," glossaryInstallToHomeScreenDef:"," \"Ang pagdagdag ng Cluckwork sa home screen ng telepono o tablet mula sa browser, para magkaroon ito \""," + \"ng sariling icon at magbukas sa sarili nitong window nang walang mga bar ng browser. Iisa lang \""," + \"itong app, hindi hiwalay na download — walang i-a-update mula sa isang app store. Naialok lang sa \""," + \"pamamagitan ng secure (https) address, at hindi nito ginagawang offline ang app: \""," + \"kailangan pa rin nito ng koneksyon para mag-load at mag-save.\","," glossaryNewVersionReadyTerm: \"May bagong bersyon na\","," glossaryNewVersionReadyDef:"," \"Pagkatapos ng release, napapansin ng naka-install na app ang bagong bersyon sa background at \""," + \"nagtatanong bago lumipat, sa halip na mag-reload habang nagta-type ka. Pindutin ang I-reload \""," + \"kapag maganda ang timing mo, o Mamaya at magtatanong ulit ito sa susunod. Walang mawawala sa \""," + \"pag-iwan nito — patuloy na gumagana ang tumatakbong app hanggang tanggapin mo ito.\","," glossaryTooManySignInAttemptsTerm: \"Masyadong maraming pagtatangkang mag-sign in\","," glossaryTooManySignInAttemptsDef:"," \"Rate-limited ang pag-sign in para pabagalin ang panghuhula ng password: masyadong maraming \""," + \"pagtatangka mula sa iisang lugar sa loob ng ilang minuto ay tatanggihan gamit ang mensaheng ito \""," + \"hanggang lumipas ang maikling paghihintay. Hindi nito naaapektuhan ang session na naka-sign in \""," + \"na.\","," glossaryStepUpAuthTerm: \"Karagdagang pagpapatunay (step-up)\","," glossaryStepUpAuthDef:"," \"Isang karagdagang tsek bukod sa pagiging naka-sign in: bago gumawa ng isa pang Owner o mag-reset ng \""," + \"password ng umiiral na Owner, hinihiling ng Users screen na muling ilagay ang kasalukuyan mong \""," + \"password mismo sa dialog. Kinukumpirma nito na ikaw talaga bago bigyan ng ganoong kalaking access \""," + \"— walang ibang aksyon sa screen na iyon ang muling nagtatanong.\","," glossarySomethingWentWrongScreenTerm: \"Screen na \\\"Something went wrong\\\"\","," glossarySomethingWentWrongScreenDef:"," \"Ipinapakita ito ng isang screen kapag may error, sa halip na maging blangko. Ligtas ang naka-save \""," + \"na data — maaaring kailanganin mong muling i-type ang anumang tina-type mo pa; i-tap ang \""," + \"I-reload o Bumalik sa dashboard. Naglalaman ang \\\"Error details\\\" ng mensahe para sa screenshot.\","," glossaryDailyEntryTerm: \"Araw-araw na Tala\","," glossaryDailyEntryDef: \"Ang araw ng isang kawan: itlog ayon sa grado, nawala, namatay. Draft hanggang isumite.\","," glossaryEggLotTerm: \"Lote ng itlog\","," glossaryEggLotDef:"," \"Isang may petsang batch ng maibebentang itlog ng isang grado, ginawa sa pamamagitan ng pagsumite \""," + \"ng entry. Ang stock ay ang kabuuan ng mga lote.\","," glossaryGradeTerm: \"Grado\","," glossaryGradeDef: \"Isang grading bucket (sukat, kalidad, o custom). Ang mga grado na nabibili ay puwedeng ibenta.\","," glossaryEggMovementLedgerTerm: \"Talaan ng galaw ng itlog\","," glossaryEggMovementLedgerDef:"," \"Ang history line by line sa likod ng balanse ng isang lote ng itlog: papasok na production, \""," + \"palabas na benta, at mga pagtatama at void na may kaukulang sign.\","," glossaryFifoTerm: \"FIFO\","," glossaryFifoDef:"," \"\\\"First in, first out\\\" — palaging kinukuha muna ng benta at ng paggamit ng feed ang pinakalumang \""," + \"stock.\","," glossaryCullTerm: \"Cull\","," glossaryCullDef: \"Mga ibong sadyang inalis sa isang kawan (naibenta, pinatay, ibinigay) — hindi kamatayan.\","," glossaryMortalityTerm: \"Mortality\","," glossaryMortalityDef:"," \"Mga kamatayan, itinatala sa araw-araw na entry; awtomatikong napupunta sa talaan ng ibon kapag \""," + \"isinumite.\","," glossaryDepleteTerm: \"Deplete\","," glossaryDepleteDef:"," \"Markahan ang isang kawan na wala nang natitirang ibon. Nananatili ang history; ma-rereverse gamit \""," + \"ang Reactivate.\","," glossaryArchiveTerm: \"Archive\","," glossaryArchiveDef: \"Itago ang tapos na kawan mula sa araw-araw na trabaho. Ma-rereverse gamit ang Reactivate.\","," glossaryWithdrawalRestrictionTerm: \"Withdrawal restriction\","," glossaryWithdrawalRestrictionDef:"," \"Isang hold sa mga itlog habang may withholding period ng gamot. Darating kasabay ng medication \""," + \"tracking — wala pang naglalagay ng restriction sa ngayon, kaya pamahalaan muna ang withholding \""," + \"period sa labas ng Cluckwork.\","," glossaryProductTerm: \"Produkto\","," glossaryProductDef:"," \"Ang ibinebenta mo — tumuturo ang isang produktong itlog sa isang grado (ang pinagmumulan ng stock \""," + \"nito) at may dalang selling unit at default na presyo.\","," glossaryPackedUnitTerm: \"Packed unit\","," glossaryPackedUnitDef:"," \"Ilang itlog ang laman ng isang dosena/tray/karton/case sa bukid mo. Iniingatan ng bawat linya ng \""," + \"benta ang bilang na ipinagbenta dito.\","," glossarySalesLineTerm: \"Linya ng benta\","," glossarySalesLineDef:"," \"Isang produkto sa isang order: dami sa selling unit, may presyo kada unit; ang mga itlog sa likod \""," + \"nito ay dami × ang bilang ng itlog ng unit.\","," glossaryConfirmOrderTerm: \"Kumpirmahin (order)\","," glossaryConfirmOrderDef:"," \"Ginagawang tunay na benta ang isang draft order at inilalaan ang stock. Ma-a-undo lang sa \""," + \"pamamagitan ng pag-void.\","," glossaryVoidOrderTerm: \"I-void (order)\","," glossaryVoidOrderDef:"," \"Pag-undo ng isang maling kumpirmasyon — babalik ang stock sa eksaktong lote na pinagmulan nito. \""," + \"Kailangan ng dahilan.\","," glossaryCancelOrderTerm: \"Kanselahin (order)\","," glossaryCancelOrderDef: \"Isara ang isang draft na hindi natuloy. Walang kinalaman na stock.\","," glossaryInventoryItemTerm: \"Item sa imbentaryo\","," glossaryInventoryItemDef:"," \"Isang catalog entry para sa isang bagay na nasa stock mo (feed, supplement…), na may fixed na unit \""," + \"of measure.\","," glossaryInventoryLotTerm: \"Lote ng imbentaryo\","," glossaryInventoryLotDef:"," \"Isang natanggap na batch ng isang item, may sariling cost. On-hand = kabuuan ng mga lote.\","," glossaryInventoryMovementLedgerTerm: \"Talaan ng galaw ng imbentaryo\","," glossaryInventoryMovementLedgerDef:"," \"Ang append-only na trail ng bawat pagbabago sa stock ng feed/supply. Ang mga pagtatama ay bagong \""," + \"row, hindi kailanman edit.\","," glossaryWaterUsageTerm: \"Paggamit ng tubig\","," glossaryWaterUsageDef:"," \"Ang ininom ng isang kawan sa isang araw — direktang dami o meter delta. Editable sa lugar; naka-fix \""," + \"ang kawan/petsa.\","," glossaryFeedUsageTerm: \"Paggamit ng feed\","," glossaryFeedUsageDef:"," \"Ang kinain ng isang kawan sa isang araw; ina-drain ang mga lote nang FIFO at tinatantiya ang cost \""," + \"mula rito.\","," glossaryAdjustmentDiscardTerm: \"Adjustment / Discard\","," glossaryAdjustmentDiscardDef:"," \"Mga pagtatama sa stock laban sa isang lote, kailangan ng dahilan. Discard = write-off (spoilage).\","," glossaryRolesTerm: \"Mga Tungkulin\","," glossaryRolesDef:"," \"Admin (may-ari), Manager, Manggagawa, Benta, Read-only — tingnan ang \\\"Sino ang puwedeng gumawa ng \""," + \"ano\\\". Nagtatala ang mga manggagawa; nagtatama at nagko-configure rin ang mga manager; \""," + \"hinahawakan ng benta ang mga order at bayad; nanonood lang ang read-only.\","," glossaryLockedEntryTerm: \"Naka-lock (entry)\","," glossaryLockedEntryDef:"," \"Isang naisumiteng entry na mas matanda sa 7 araw — sarado sa mga karaniwang edit; gumagana pa rin \""," + \"ang pag-adjust/void ng admin.\","," glossaryAdjustEntryTerm: \"I-adjust (entry)\","," glossaryAdjustEntryDef:"," \"Pagtatama ng admin sa isang naisumiteng entry. Awtomatikong nagtutugma ang stock at ang talaan ng \""," + \"ibon; hindi na magagalaw ang mga naibentang itlog; nananatiling nakikita ang mga naunang value.\","," glossaryVoidEntryTerm: \"I-void (entry)\","," glossaryVoidEntryDef:"," \"Pag-undo ng admin sa buong naisumiteng entry — nauubusan ang mga lote, nire-reverse ang mga \""," + \"kamatayan, at nananatiling Na-void ang entry. Tinatanggihan kapag naibenta na ang mga itlog nito.\","," glossaryFarmSettingsTerm: \"Mga Setting ng Bukid\","," glossaryFarmSettingsDef:"," \"Ang pangalan ng bukid, time zone, locale, currency, at unit system, kasama ang opsyonal na unang \""," + \"araw ng linggo at mga format ng petsa/oras. Setup → Mga Setting ng Bukid; nag-e-edit ang mga \""," + \"may-ari at manager, nakakabasa ang lahat — hindi permission ang pag-format ng pera at petsa.\","," glossaryCurrencyLockTerm: \"Currency lock\","," glossaryCurrencyLockDef:"," \"Hindi na ma-e-edit ang currency ng bukid sa sandaling may magtala ng halaga dito — isang benta, \""," + \"isang bayad, isang gastos, isang produktong may presyo, pera na ginastos sa feed. Ipinapakita ng \""," + \"field na naka-lock ito kasama ang dahilan. Wala nang muling pinepresyuhan ang anumang naitala \""," + \"na, ito mismo ang buong punto.\","," glossaryFarmLogoTerm: \"Logo ng Bukid\","," glossaryFarmLogoDef:"," \"Ang sarili mong larawan sa halip ng Cluckwork mark sa sidebar, ina-upload mula sa Mga Setting ng \""," + \"Bukid. PNG, JPEG, o WebP (2 MB bilang default), still images lang; mas mabasa ang isang \""," + \"parisukat at simpleng mark sa maliit na sukat ng sidebar. Naka-store bilang muling ginawang \""," + \"kopya na tinanggalan ng detalye ng camera at lokasyon.\","," glossaryFarmPaletteTerm: \"Paleta ng Bukid\","," glossaryFarmPaletteDef:"," \"Ang accent color para sa buong bukid, pinipili ng isang admin sa Mga Setting ng Bukid. Hiwalay ito \""," + \"sa sariling setting ng light/night mode ng bawat tao.\","," glossaryUiLanguageTerm: \"Wika ng UI\","," glossaryUiLanguageDef:"," \"Ang wikang ipinapakita sa interface, kada user — English, Español, o Tagalog — pinipili mula sa \""," + \"Account → Preferences. Ang English ang fallback para sa anumang screen na hindi pa naisasalin, \""," + \"kahit anong wika ang pinili mo.\","," glossaryRepoNote:"," \"Nasa specs/product/GLOSSARY.md ng repository ang kumpletong mga depinisyon sa \""," + \"spec-language.\",","} as const;","web/src/i18n/es.ts",[2906],{"_787":788,"_789":2907,"_410":2908,"_792":62},2210,[1004,1005,2909,2910,2911,2912,1015,2913,2914,2915,2916,2917,2918,2919,2920,2921,1025,2922,2923,2924,2925,2926,2927,2928,2929,2930,2931,1036,1037,1038,2932,2933,2934,2935,2936,1044,2937,2938,1047,2939,1036,1049,2940,2941,2942,202,1053,1054,1055,2943,2944,2945,1062,2946,2947,2948,2949,2950,2951,2952,2953,2954,1036,1072,2955,1036,202,1074,2956,1076,2957,2958,2959,1082,1083,2960,2961,2962,2963,2964,2965,2966,202,1091,2967,2968,2969,2970,2971,2972,2973,2974,2975,2976,2977,2978,2979,2980,2981,2982,2983,2984,1110,1111,2985,202,1113,2986,2987,2988,1117,2989,2990,1120,2991,2992,2993,1124,202,1125,2994,2995,2996,2997,1036,202,1074,2998,1131,1132,2999,3000,1036,202,1074,3001,1136,3002,1138,3003,3004,3005,3006,1143,3007,3008,3009,3010,3011,1036,202,1074,3012,1151,3013,3014,3015,3016,1036,202,1074,3017,3018,1158,3019,3020,1036,202,1074,3021,1162,1163,3022,3009,3023,3024,1036,202,1167,1168,3025,2920,3026,3027,202,1172,3028,3029,3030,3031,3032,3033,3034,3035,3036,1182,3037,3038,3039,3040,3041,3042,3043,202,1190,3044,3045,3046,3047,3048,3049,3050,3051,3052,3053,3054,202,1202,3055,3056,3057,3058,3059,3060,3061,202,1210,3062,3063,202,1213,3064,202,1215,3065,3066,3067,3068,3069,3070,3071,3072,3073,202,1226,3074,3075,3076,3077,3078,3079,202,1233,3080,3081,3082,3083,3084,3085,3086,1241,3087,202,1243,3088,3089,3090,3091,3092,3093,3094,3095,202,1252,3096,1254,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,202,1266,3108,3109,3110,3111,3112,1036,202,1272,3113,1274,1275,1276,1277,1278,1279,3114,202,1281,3115,1283,3116,3117,202,1286,3118,202,1288,3119,3120,3121,3122,3123,202,1294,3124,3125,3126,3127,3128,3129,202,1301,1302,3130,3131,1306,3132,3133,202,1309,3134,3135,3136,3137,202,1314,3138,3139,3140,3141,3142,202,1320,1321,3143,3144,1325,3145,202,1327,3146,1329,3147,3148,3149,3150,202,1334,3151,3152,3153,3154,3155,3156,3157,3158,202,1343,3159,3160,3161,3162,202,1348,3163,1350,3164,3165,3166,202,1354,3167,3168,1036,202,1272,3169,1358,3170,3171,1362,3172,202,1281,3173,3174,202,1366,3175,3176,3177,202,1370,3178,3179,3180,3181,3182,3183,1977,3184,202,1379,3185,3186,1382,3187,3188,3189,202,1386,3190,3191,1389,3192,3193,1036,202,1272,3194,1393,1394,1395,1396,1397,3195,202,1281,3196,3197,3198,1402,3199,3200,202,1405,3201,3202,3203,202,1409,3119,3121,3122,3204,3205,3206,3207,3208,3209,3210,202,1417,3211,3212,3213,202,1243,3214,3215,202,1354,3216,3217,202,1425,3218,3219,3220,3221,202,1430,3222,3180,3223,3224,3225,3226,3227,3228,1036,202,1272,3229,1439,1440,1441,1442,1443,1446,3230,3231,202,1449,3232,202,1405,3233,3234,3235,202,1172,3236,3237,3238,3239,3240,3241,3242,202,1461,3243,3244,3245,3246,3247,202,1467,3248,3249,3250,3251,3181,202,1472,3252,1036,202,1474,3253,1476,1477,1478,1479,1480,1481,1482,3254,3255,3256,1486,3257,1405,3258,3259,3260,202,1281,3261,3262,3263,3264,3214,3265,1496,3266,3267,1499,3268,3269,3270,3271,202,1504,3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,202,1515,3282,3283,3284,3285,1520,3286,3287,3288,3289,3290,202,1526,3291,3292,3209,3293,3294,3295,3296,3297,3298,3210,3299,202,1536,3300,3119,3301,3122,3302,202,1540,3303,1542,3244,3304,3305,3306,3307,3019,3308,202,1548,3309,3310,3311,3312,3313,3314,202,1555,3248,3315,3316,3317,3181,3318,3240,3241,3242,1036,202,1474,3319,1561,1562,3320,3321,3322,3323,1568,3324,202,1281,3325,3326,3089,3090,202,1405,3327,3328,3329,3330,202,1576,3331,3332,3333,202,1580,3125,1581,3334,3335,3336,3337,3338,3339,3340,202,1589,3341,3342,3343,3344,202,1594,3345,3248,1382,3346,3347,3181,3240,3241,3242,202,1598,3348,1600,3349,3350,3351,3352,3353,3354,3355,1036,202,1474,3356,1610,1611,1612,1613,3357,1617,3358,202,1281,3359,3360,3361,202,3186,202,1622,1382,3187,3188,3362,3363,1625,3364,3365,202,1628,3366,3367,3368,3369,3370,3371,202,1635,3372,1637,3373,3374,3375,3310,3376,3377,1036,202,1474,3378,1644,1645,1646,1647,1648,3379,1653,3380,202,1281,3196,3381,202,3382,1405,3383,3384,3385,202,1294,3124,3243,3386,3127,3128,3387,202,1662,3388,3389,3390,3391,3392,202,1668,3393,202,3394,202,1671,3248,3395,3396,1674,3397,3181,3398,202,1677,3240,3399,3400,3401,3402,3403,202,1683,3404,1685,3405,3406,3407,3408,1690,3409,3410,202,1693,3411,3412,1696,3413,3414,3415,3416,202,1701,3417,3122,3244,3210,3418,202,3419,202,1548,3309,3310,3420,3312,1036,202,1706,3421,1708,1709,1710,1715,3422,1405,3423,3424,3425,202,1720,3426,3427,3428,3429,3430,3431,3432,3433,1729,3434,3435,3436,1733,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,1744,3447,3448,3449,202,1748,3450,3451,3452,1752,3453,3454,3455,3456,1758,3457,3458,3459,3460,3461,3462,3463,1767,3464,3465,3466,3467,3468,3469,3470,3471,3472,3473,1778,3474,3475,3476,3477,3478,3479,202,1281,1785,3480,3481,1788,3482,3483,1791,3484,3485,3486,1036,202,1706,3421,1794,1795,1799,3487,3488,1802,3489,3490,3491,3492,3493,202,1809,3494,3495,3496,3497,3498,3499,202,3500,3501,3502,3503,202,1820,3504,3505,3506,3240,3507,3508,202,1826,3509,1828,3510,3511,3512,3513,3514,3515,202,1836,3516,3517,202,1839,3518,1841,3519,3520,3521,3522,3523,3524,202,1281,3525,3526,3527,3528,1036,202,1706,3421,1852,1853,1854,1855,3529,202,1281,3530,3531,1859,3532,3533,3534,3535,3536,202,1865,3088,3089,3090,3091,202,1866,3537,3277,3538,3539,3540,3541,202,1872,3542,3543,3544,3545,3546,3547,3241,3401,3548,202,1880,3549,3122,3550,3551,3552,3553,3554,3555,3556,3557,202,1890,3558,3559,3212,202,1893,3560,3222,3315,3561,3562,3180,3226,3227,3228,1036,202,1706,3421,1897,1898,1899,3563,3564,202,1902,3565,3566,3567,3568,3569,3570,202,1281,3571,3572,202,1911,3573,3248,3574,3575,3576,3226,3577,1036,202,1917,3421,1918,1919,3578,3579,3580,3581,1926,3582,3583,202,1405,3584,3585,3586,3587,202,1933,3588,3589,3590,1859,3591,3592,3593,1939,3594,3595,1942,3596,3597,3598,3599,1947,3600,3601,3602,3603,3604,3605,3606,3607,1955,3594,3608,3609,202,1866,3119,3610,3219,3220,202,1959,3611,3612,1962,3613,3138,3614,3140,3141,3615,3616,3019,3617,202,3618,202,1971,3222,3180,3181,3193,1972,1973,3619,3620,3621,1977,3622,3240,3623,3624,3228,202,1981,3625,3626,3627,3628,3629,3630,1036,202,1917,3421,1988,1989,3631,1996,3632,3219,3220,202,3633,3222,3182,3621,3634,3635,3636,3637,3638,3639,202,3640,3641,2007,3642,3643,2010,3644,3645,3646,3647,2015,3648,3649,1036,202,2018,3421,2019,2020,3650,2026,3651,1405,3652,3653,3654,3655,3656,3657,3658,3659,2036,3660,3661,3228,1036,202,2039,3421,3662,3663,3664,3665,2044,3666,1405,3667,3668,3669,3670,202,3671,3672,3673,3674,202,3675,202,3676,3677,3678,3679,3680,3681,3682,3683,3684,3685,3686,3687,3688,3689,3690,3691,3692,3693,3694,3695,1036,202,1706,3696,2076,2077,2078,2079,2080,2081,2082,2083,2090,2091,3697,3698,3699,3700,3701,3702,3703,3704,3705,3706,3707,3708,3709,202,2105,3710,3711,3712,3713,3714,202,2111,3715,3716,3717,3718,202,2116,2117,2118,202,2119,3719,3720,3721,202,2123,3722,2125,3723,3724,3725,3726,3727,3728,3729,3730,202,2134,3731,3732,3733,3734,202,2139,3735,3736,3737,202,2143,3738,3739,3740,3741,3742,3743,3744,3745,202,2152,3746,3747,202,2155,3748,2157,2158,3749,3750,3751,3752,202,2163,2164,2165,2166,3753,3754,3755,3756,3757,3758,3759,3760,3761,3762,3763,3764,3765,3766,3767,3768,3769,3770,3771,3772,3773,3774,3775,3776,3777,3778,3779,3780,3781,3782,3783,3784,202,3785,3786,3787,3788,3789,3790,3791,3792,3793,3794,3795,3796,3797,3798,1036,202,2218,2219,3799,3800,3801,3802,3803,3804,3805,3806,3807,2233,3808,3809,3810,3811,3812,202,3813,3814,3815,3816,3817,3818,3819,3820,3821,3822,3823,3824,3825,3826,3827,3828,3829,3830,3831,3832,3833,3834,3835,202,3836,2263,3837,3838,2265,3839,3840,3841,3842,2270,3843,3844,3845,3846,3847,202,3848,2277,3849,3850,3851,2280,3852,3853,3854,3855,3856,2286,3857,3858,3859,3860,2291,3861,3862,3863,3864,2296,2297,3865,3866,3867,3868,3869,2303,3870,3871,3872,3873,3874,3875,3876,202,3877,2312,3878,3879,3880,3881,3882,3883,3884,202,3885,2322,3886,3887,3888,3889,3890,2329,3891,3892,3893,3894,2334,3895,3896,3897,2338,3898,3899,3900,3901,3902,3903,3904,2347,3905,3906,3907,3908,3909,3910,202,3911,2355,3912,3913,3914,3915,2360,3916,3917,3918,3919,3920,2366,3921,3922,3923,3924,2372,3925,3926,3927,2376,3928,3929,3930,3931,2381,3932,3933,3934,3935,3936,3937,2389,3938,3939,3940,3941,3942,202,3943,2396,3944,3945,3946,3947,2401,3948,3949,3950,2405,3951,3952,3953,3954,3955,2410,3956,3957,3958,2414,3959,3960,3961,2418,3962,3963,3964,3965,2423,3966,3967,3968,2427,3969,3970,3971,3972,3973,3974,3975,2436,3976,3977,3978,3979,2442,3980,3981,202,3982,2446,3983,3984,3985,3986,2451,3987,3988,3989,2456,3990,3991,202,3992,2460,3993,3994,3995,2464,3996,3997,3998,3999,4000,202,4001,2472,4002,4003,4004,2477,4005,4006,4007,202,4008,2482,4009,4010,4011,4012,2487,4013,4014,4015,4016,4017,202,4018,2495,4019,4020,4021,2499,4022,4023,4024,4025,2504,4026,4027,2507,4028,4029,4030,2511,4031,4032,202,4033,2515,4034,4035,2518,4036,4037,4038,4039,2523,4040,4041,202,4042,2527,4043,4044,4045,4046,4047,4048,2534,4049,4050,2537,4051,4052,4053,4054,4055,2543,4056,4057,4058,4059,4060,4061,202,4062,2552,4063,4064,4065,4066,2556,4067,4068,4069,202,4070,2561,4071,4072,4073,4074,2566,4075,4076,4077,2570,4078,4079,202,4080,2574,4081,4082,4083,2578,4084,4085,4086,2582,4087,4088,4089,202,4090,2587,4091,4092,4093,4094,202,4095,2593,4096,4097,4098,4099,2599,4100,4101,202,4102,2603,4103,4104,4105,4106,4107,4108,4109,2611,4110,4111,4112,4113,4114,4115,4116,2619,4117,4118,4119,4120,2624,4121,4122,4123,4124,4125,4126,2631,4127,4128,4129,4130,202,4131,2638,4132,4133,4134,2642,4135,4136,4137,202,4138,2647,4139,4140,4141,4142,2652,4143,4144,4145,2656,4146,4147,4148,2660,4149,4150,4151,4152,2665,4153,4154,4155,4156,202,4157,2671,4158,4159,4160,4161,4162,4163,202,4164,4165,202,4166,4167,202,4168,2683,4169,4170,202,4171,2687,4172,4173,202,4174,2691,4175,4176,4177,202,4178,2696,4179,4180,4181,4182,202,4183,2702,4184,4185,4039,202,4186,2707,4187,4188,4189,4190,202,4191,2713,4192,4193,4194,4195,202,4196,2719,4197,4198,4199,4200,4201,202,2725,4202,4203,4204,4205,4206,4207,202,4208,2737,4209,4210,202,4211,2741,4212,4213,4214,4215,4216,4217,4218,4116,202,4219,2751,4220,4221,4222,4223,4224,202,4225,2758,4226,4227,4228,4229,202,4230,2764,4231,4232,4233,202,2296,4234,2770,4235,4236,4237,4238,202,4239,2776,4240,4241,4242,4243,202,4244,4245,202,4246,2783,4247,4248,202,2786,4249,4250,4251,202,4252,2789,4253,4254,202,2792,2793,4255,4256,202,4257,4258,4259,202,4260,2799,4261,202,4262,2803,4263,202,4264,4265,202,4266,2809,4267,4268,4269,202,4270,2814,4271,4272,202,4273,2818,4274,4275,202,4276,2822,4277,4278,202,4279,2826,4280,202,4281,2830,4282,4283,202,4284,4285,202,4286,2836,4287,4288,202,4289,2840,4290,202,4291,2843,4292,4293,202,4294,2847,4295,4296,202,4297,2851,4298,202,4299,2855,4300,202,4301,2858,4302,4303,4304,202,4305,2863,4306,4307,202,4308,2867,4309,4310,4311,202,4312,2871,4313,4314,202,4315,2875,4316,4317,4318,4319,202,4320,2880,4321,4322,4323,202,4324,2886,4325,4326,4327,4328,202,4329,2892,4330,4331,202,4332,2896,4333,4334,4335,202,2900,4336,4337,1036,2903],"// Translator note: UI screen/label names referenced in prose (e.g. \"(Customers","// page)\" in sales.addCustomerFirst) are kept in English, matching the actual","// on-screen label, until that screen itself is externalized to the catalog (#182).","export const es = {"," cancel: \"Cancelar\","," save: \"Guardar\","," close: \"Cerrar\","," delete: \"Eliminar\","," edit: \"Editar\","," add: \"Agregar\","," confirm: \"Confirmar\","," loading: \"Cargando…\","," working: \"Procesando…\","," \"Un botón con un indicador giratorio significa que el guardado sigue en curso — volver a pulsarlo no registrará lo mismo dos veces.\","," retry: \"reintentar\","," required: \"Requerido\","," optional: \"Opcional\","," actions: \"Acciones\","," search: \"Buscar\","," all: \"Todos\","," none: \"Ninguno\","," yes: \"Sí\","," no: \"No\","," email: \"Correo electrónico\","," password: \"Contraseña\","," signIn: \"Iniciar sesión\","," signingIn: \"Iniciando sesión…\","," invalidCredentials: \"Correo electrónico o contraseña inválidos.\","," \"Demasiados intentos de inicio de sesión. Espere unos minutos y vuelva a intentarlo.\","," apiDown: \"No se pudo iniciar sesión. ¿Está la API en ejecución?\","," credentialsTooLong: \"Eso es demasiado largo — revise su correo electrónico y contraseña.\","," preferences: \"Preferencias\","," language: \"Idioma\","," languageHint: \"El idioma en que se muestra la interfaz, solo para usted.\","," heading: \"Cuenta\","," roleLine: \"Ha iniciado sesión con el rol de {{role}}.\","," changePasswordHeading: \"Cambiar contraseña\","," \"Al cambiar su contraseña se cerrará la sesión en todos los demás \""," + \"dispositivos — este dispositivo seguirá con la sesión iniciada.\","," currentPasswordLabel: \"Contraseña actual \","," newPasswordLabel: \"Nueva contraseña (mín. {{min}} caracteres) \","," confirmPasswordLabel: \"Confirmar nueva contraseña \","," changePasswordButton: \"Cambiar contraseña\","," passwordMismatchError: \"Las nuevas contraseñas no coinciden.\","," passwordTooShortError: \"La nueva contraseña debe tener al menos {{min}} caracteres.\","," passwordChangedMessage: \"Contraseña cambiada. Se cerró la sesión en los demás dispositivos.\","," \"Me.Language.Format\": \"El idioma debe ser un código de 2 a 8 letras, por ejemplo 'en'.\","," // backfilling es for the shared nav chrome (previously English-only under"," // \"groupYou\" (\"You\") translated literally as \"Usted\" (formal register,"," // matching account. elsewhere) — flag for native review, an unusual"," // section-heading rendering worth a second look."," groupOverview: \"Resumen\","," groupProduction: \"Producción\","," groupSalesStock: \"Ventas y existencias\","," groupInsights: \"Estadísticas\","," groupSetup: \"Configuración\","," groupYou: \"Usted\","," groupHelp: \"Ayuda\","," dashboard: \"Panel\","," dailyEntry: \"Registro diario\","," flocks: \"Lotes\","," water: \"Agua\","," inventory: \"Inventario\","," stock: \"Existencias\","," customers: \"Clientes\","," sales: \"Ventas\","," history: \"Historial\","," reports: \"Informes\","," expenses: \"Gastos\","," farmSettings: \"Configuración de la granja\","," grades: \"Grados\","," products: \"Productos\","," users: \"Usuarios\","," audit: \"Auditoría\","," export: \"Exportación\","," account: \"Cuenta\","," help: \"Ayuda\","," skipToContent: \"Saltar al contenido principal\","," primaryNavAriaLabel: \"Principal\","," signOut: \"Cerrar sesión\","," \"No se pudo cargar la configuración de esta granja, así que las \""," + \"fechas siguen a este dispositivo en lugar de a la granja.\","," \"No se pudo volver a leer la configuración de esta granja, así que \""," + \"lo que ve aquí podría estar desactualizado.\","," tryAgain: \"Reintentar\","," tabBarAriaLabel: \"Secciones\","," moreButton: \"Más\","," menuTitle: \"Menú\","," allSectionsAriaLabel: \"Todas las secciones\","," // backfilling es for NumberField's stepper buttons. {{label}} is the"," increaseLabel: \"Aumentar {{label}}\","," decreaseLabel: \"Disminuir {{label}}\","," // backfilling es for the app/screen error-boundary fallback UI."," title: \"Algo salió mal\","," \"Esta pantalla tuvo un problema y no pudo terminar de cargar. Todo lo \""," + \"que ya había guardado está a salvo, pero es posible que tenga que \""," + \"volver a escribir lo que todavía estaba escribiendo aquí. El resto \""," + \"de la aplicación sigue funcionando.\","," \"La aplicación tuvo un problema y no pudo terminar de cargar. \""," + \"Recargar suele solucionarlo.\","," reload: \"Recargar\","," backToDashboard: \"Volver al panel\","," detailsSummary: \"Detalles del error\","," // backfilling es for the light/night mode toggle."," switchToLightMode: \"Cambiar al modo claro\","," switchToNightMode: \"Cambiar al modo nocturno\","," light: \"Claro\","," night: \"Nocturno\","," // backfilling es for the shared useConfirm dialog's reason field. \"Motivo\""," // matches the existing sales.voidReasonLabel precedent."," reasonLabel: \"Motivo \","," reasonRequired: \"Se requiere un motivo.\","," // backfilling es for the service-worker \"update ready\" banner"," updateAvailable: \"Hay una nueva versión de Cluckwork lista.\","," reloading: \"Recargando…\","," later: \"Más tarde\","," title: \"Ventas\","," payments: \"Pagos\","," ordersHeading: \"Pedidos\","," newOrder: \"Nuevo pedido\","," newDraftOrder: \"Nuevo pedido borrador\","," save: \"guardar\","," cancelEdit: \"cancelar\","," edit: \"editar\","," remove: \"eliminar\","," addLine: \"Agregar línea\","," confirmOrderButton: \"Confirmar pedido (asigna existencias)\","," cancelDraft: \"Cancelar borrador\","," // common.close (\"Cerrar\") — mirrors en.sales.close (#182)."," close: \"cerrar\","," voidPaymentButton: \"anular\","," recordPayment: \"Registrar pago\","," voidOrderButton: \"Anular pedido (devuelve existencias)\","," open: \"abrir\","," loadMore: \"cargar más\","," customer: \"Cliente\","," date: \"Fecha\","," product: \"Producto\","," perLabel: \"Por\","," quantity: \"Cantidad\","," unitPriceWithCurrency: \"Precio unitario ({{code}})\","," method: \"Método\","," referenceOptional: \"Referencia (opcional)\","," noteOptional: \"Nota (opcional)\","," amountWithCurrency: \"Monto ({{code}})\","," status: \"Estado\","," qty: \"Cant.\","," eggs: \"Huevos\","," unitPrice: \"Precio unitario\","," lineTotal: \"Total de línea\","," reference: \"Referencia\","," amount: \"Monto\","," total: \"Total\","," editQuantityAriaLabel: \"Editar cantidad\","," editUnitPriceAriaLabel: \"Editar precio unitario\","," allOption: \"Todos\","," // NOTE (flag for native review): \"Flat\" (a 2.5/30-egg flat) has no single"," // standard Spanish term across regions (cubeta/maple/panel all in use);"," // \"Cubeta\" chosen as the common Mexican-Spanish term."," unitEgg: \"Huevo\","," unitDozen: \"Docena\","," unitFlat: \"Cubeta\","," unitTray: \"Bandeja\","," unitCarton: \"Cartón\","," unitCase: \"Caja\","," methodCash: \"Efectivo\","," methodCheck: \"Cheque\","," methodCard: \"Tarjeta\","," methodBankTransfer: \"Transferencia bancaria\","," methodMobilePayment: \"Pago móvil\","," methodOther: \"Otro\","," addCustomerFirst: \"Agregue un cliente primero (Customers page) y luego cree un pedido.\","," noOrdersMatch: \"Ningún pedido coincide.\","," voidingNeedsAdmin: \"Anular requiere un administrador.\","," voidReasonLabel: \"Motivo de anulación: {{reason}}\","," orderTotal: \"Total: {{amount}}\","," perUnit: \"por {{unit}}\","," eggsCount: \"({{count}} huevos)\","," paymentsSummary: \"Pagado {{paid}} — pendiente {{outstanding}}\","," enterValidAmount: \"Ingrese un monto válido.\","," noDecimalPlaces: \"Esta moneda no tiene decimales.\","," atMostDecimals: \"Como máximo {{count}} decimales para esta moneda.\","," enterAmountGreaterThanZero: \"Ingrese un monto mayor que cero.\","," invalidUnitPrice: \"Precio unitario inválido.\","," loadSalesDataFailed: \"No se pudieron cargar los datos de ventas. ¿Está la API activa?\","," loadOrdersFailed: \"No se pudieron cargar los pedidos.\","," loadPaymentsFailed: \"No se pudieron cargar los pagos de este pedido.\","," confirmOrderTitle: \"¿Confirmar este pedido?\","," \"Las existencias se asignan del inventario, primero los lotes más antiguos (FIFO). \" +"," \"Una confirmación por error se puede deshacer con Anular, que devuelve las existencias.\","," confirmOrderConfirmLabel: \"Confirmar pedido\","," cancelDraftTitle: \"¿Cancelar este borrador?\","," cancelDraftBody: \"El pedido pasa a cancelado y ya no se puede editar ni confirmar.\","," voidPaymentTitle: \"¿Anular este pago?\","," voidPaymentBody: \"El monto pendiente del pedido aumenta de nuevo por el valor del pago.\","," voidPaymentConfirmLabel: \"Anular pago\","," voidOrderTitle: \"¿Anular este pedido confirmado?\","," voidOrderBody: \"Las existencias asignadas vuelven exactamente a los lotes de huevos de donde provinieron.\","," voidOrderConfirmLabel: \"Anular pedido\","," orderConfirmed: \"Pedido {{ref}} confirmado — existencias asignadas (FIFO).\","," draftOrderCancelled: \"Pedido borrador cancelado.\","," paymentRecorded: \"Pago registrado.\","," paymentVoided: \"Pago anulado — el monto pendiente aumentó de nuevo.\","," orderVoided: \"Pedido {{ref}} anulado — existencias devueltas al inventario.\","," // backfilling es for the Daily entry capture screen (Task 11, en.ts, batch"," title: \"Registro diario\","," loadFlocksGradesFailed: \"No se pudieron cargar los lotes/grados. ¿Está la API activa?\","," \"Este enlace de edición apunta a un lote o fecha que ya no está \""," + \"disponible — se usan los valores predeterminados habituales en su lugar.\","," editingDraftBadge: \"Editando borrador\","," flockLabel: \"Lote\","," noFlocksYetOption: \"— aún no hay lotes —\","," depletedFlockSuffix: \" — agotado, solo para registrar fechas pasadas\","," dateLabel: \"Fecha\","," newFlockButton: \"+ nuevo lote\","," newFlockDialogTitle: \"Nuevo lote\","," nameLabel: \"Nombre\","," breedLabel: \"Raza\","," placedLabel: \"Colocación\","," birdsLabel: \"Aves\","," createFlockButton: \"Crear lote\","," \"Este día ya está {{status}} — sus lotes de huevos existen. \""," + \"Las correcciones se hacen desde Historial (administradores: ajustar o anular).\","," \"No se pudo comprobar si este día ya tiene un registro — el guardado \""," + \"está bloqueado para no sobrescribir datos existentes.\","," stepLabel: \"Paso {{n}}\","," stepOfTotal: \"de 2:\","," eggCountsHeading: \"Conteo de huevos\","," gradingHeading: \"Clasificación\","," totalEggsLabel: \"Total de huevos\","," crackedLabel: \"Rotos\","," dirtyLabel: \"Sucios\","," discardedLabel: \"Descartados\","," mortalityLabel: \"Mortalidad\","," \"Rotos + sucios + descartados ({{losses}}) superan el total de huevos ({{total}}).\","," sellableLabel: \"Vendibles\","," deactivatedGradeSuffix: \" (desactivado)\","," takeRemainderAriaLabel: \"Poner los {{count}} restantes en {{grade}}\","," armAriaLabel: \"Elegir un grado para los {{count}} restantes\","," disarmAriaLabel: \"Cancelar la elección de grado\","," armButton: \"poner todo en…\","," disarmButton: \"elegir un grado…\","," fixCountsFirst: \"Corrija los conteos primero\","," fixCountsShort: \"corrija los conteos\","," overSellableCount: \"por encima del conteo vendible\","," overShort: \"de sobra\","," gradedDayAddsUp: \"clasificados — el día cuadra\","," allGradedShort: \"todo clasificado\","," leftToGrade: \"por clasificar\","," leftShort: \"restantes\","," countsExceedFooterMessage: \"Las pérdidas superan el total — corrija los conteos\","," sellableWord: \"vendible\","," saveDraftButton: \"Guardar borrador\","," submitButton: \"Guardar y enviar (crea lotes de huevos)\","," confirmSubmitTitle: \"¿Enviar este día?\","," \"Se crean los lotes de huevos y el registro ya no se puede editar. \""," + \"Las correcciones después de esto necesitan un ajuste de un gerente.\","," confirmSubmitLabel: \"Enviar día\","," submittedMessage: \"Enviado — se crearon {{count}} lote(s) de huevos.\","," draftSavedMessage: \"Borrador guardado.\","," // backfilling es for the Dashboard landing screen (Task 12, en.ts, batch"," // placeholder (no tags in this namespace). The two status pills on"," // this screen go through the `enums` statusLabel helper, not a key here."," title: \"Panel\","," loadFailed: \"No se pudo cargar el panel. ¿Está la API activa?\","," panelLoadError: \"No se pudo cargar.\","," statEggsCollectedToday: \"Huevos recolectados hoy\","," statEggsAvailable: \"Huevos disponibles\","," statActiveFlocks: \"Lotes activos\","," todayPanelTitle: \"Hoy\","," noFlocksMessage: \"Aún no hay lotes — cree uno en la página de Registro diario.\","," flockHeader: \"Lote\","," statusHeader: \"Estado\","," eggsHeader: \"Huevos\","," lossesHeader: \"Pérdidas\","," noEntryBadge: \"sin registro\","," stockPanelTitle: \"Existencias\","," noStockMessage: \"Aún no hay existencias — registre y envíe un registro diario.\","," availableHeader: \"Disponible\","," restrictedHeader: \"Restringido\","," eggsAvailableMessage: \"{{count}} huevos disponibles.\","," salesPanelTitle: \"Ventas recientes\","," noOrdersMessage: \"Aún no hay pedidos.\","," customerHeader: \"Cliente\","," totalHeader: \"Total\","," // backfilling es for the Water capture + correction screen (Task 13, en.ts,"," title: \"Agua\","," loadFlocksFailed: \"No se pudieron cargar los lotes. ¿Está la API activa?\","," loadRecordsFailed: \"No se pudieron cargar los registros de agua.\","," loadMoreFailed: \"No se pudo cargar más.\","," \"Este registro se acaba de cambiar en otro lugar — recargue la lista \""," + \"e inténtelo de nuevo.\","," \"Registre lo que bebió cada lote — una cantidad directa, o lecturas de \""," + \"medidor (la cantidad es la diferencia del medidor). Los registros se \""," + \"pueden corregir después; el lote y la fecha son fijos.\","," sourceLabel: \"Fuente\","," unitLabel: \"Unidad\","," fromMeterReadingsLabel: \"a partir de lecturas de medidor\","," meterStartLabel: \"Medidor inicial\","," meterEndLabel: \"Medidor final\","," quantityLabelWithUnit: \"Cantidad ({{unit}})\","," noteLabel: \"Nota\","," recordWaterButton: \"Registrar agua\","," saveCorrectionButton: \"Guardar corrección\","," cancelEditButton: \"cancelar edición\","," quantityMustBePositive: \"La cantidad debe ser un número positivo.\","," bothMeterReadingsRequired: \"Se requieren ambas lecturas del medidor.\","," recordedMessage: \"Agua registrada.\","," recordCorrectedMessage: \"Registro de agua corregido.\","," recordsHeading: \"Registros\","," fromLabel: \"Desde\","," toLabel: \"Hasta\","," noRecordsMatch: \"Ningún registro de agua coincide.\","," dateHeader: \"Fecha\","," amountHeader: \"Cantidad\","," sourceHeader: \"Fuente\","," metersHeader: \"Medidores\","," noteHeader: \"Nota\","," correctButton: \"corregir\","," loadMoreButton: \"cargar más\","," // backfilling es for the Egg grade catalog admin screen (Task 14, en.ts,"," title: \"Grados de huevo\","," loadingTitle: \"Grados\","," loadGradesFailed: \"No se pudieron cargar los grados. ¿Está la API activa?\","," \"Los grados vendibles aparecen en los selectores de registro diario y \""," + \"de pedidos. Desactivar un grado lo elimina de los selectores; las \""," + \"existencias y el historial existentes no se ven afectados.\","," newGradeButton: \"Nuevo grado\","," newGradeDialogTitle: \"Nuevo grado\","," editGradeDialogTitle: \"Editar grado\","," addGradeButton: \"Agregar grado\","," editButton: \"editar\","," deactivateButton: \"desactivar\","," activateButton: \"activar\","," nameLabel: \"Nombre \","," typeLabel: \"Tipo\","," sortLabel: \"Orden\","," saleableLabel: \"vendible\","," editNameLabel: \"Nombre\","," nameHeader: \"Nombre\","," typeHeader: \"Tipo\","," sortHeader: \"Orden\","," saleableHeader: \"Vendible\","," saleableYesBadge: \"sí\","," // backfilling es for the Feed & inventory screen (Task 16, en.ts, batch"," // for \"lot\" (a received inventory batch), matching the poultry-farm sense"," // of \"lote\" already established for nav.flocks/dailyEntry's \"lote(s) de"," // huevos\"."," title: \"Alimento e inventario\","," \"Reciba existencias como compras; cada cambio queda en el registro de \""," + \"movimientos del artículo. El registro de uso de alimento contra los \""," + \"lotes llega después.\","," loadInventoryFailed: \"No se pudo cargar el inventario. ¿Está la API activa?\","," invalidCostError: \"Costo inválido.\","," itemCreatedMessage: \"Artículo creado.\","," loadLedgerFailed: \"No se pudo cargar el registro de movimientos.\","," purchaseRecordedMessage: \"Compra registrada — existencias recibidas.\","," \"Uso de alimento registrado — se consumieron primero las existencias \""," + \"de los lotes más antiguos.\","," \"La cantidad de ajuste debe ser un número distinto de cero (negativo \""," + \"quita existencias).\","," adjustReasonRequired: \"Se requiere un motivo para las correcciones.\","," correctionRecordedMessage: \"Corrección registrada en el registro de movimientos.\","," newItemButton: \"Nuevo artículo\","," newItemDialogTitle: \"Nuevo artículo de inventario\","," editItemDialogTitle: \"Editar artículo\","," itemNameLabel: \"Nombre del artículo \","," editItemNameLabel: \"Nombre del artículo\","," categoryLabel: \"Categoría\","," unitLabel: \"Unidad \","," editUnitLabel: \"Unidad\","," defaultCostLabel: \"Costo predeterminado/unidad\","," addItemButton: \"Agregar artículo\","," itemPanelHeading: \"{{name}} — {{quantity}} {{unit}} disponible(s)\","," recordPurchaseButton: \"Registrar compra\","," recordUsageButton: \"Registrar uso\","," correctStockButton: \"Corregir existencias\","," \"Los artículos de {{category}} no se dan de comer a los lotes — el \""," + \"uso solo aplica a artículos de Alimento, Suplemento y Aditivo.\","," noFlocksForUsageMessage: \"No hay lotes — el uso necesita un lote para alimentar.\","," correctionsNeedAdminMessage: \"Las correcciones de existencias requieren un administrador.\","," noLotsMessage: \"Aún no hay lotes — las correcciones se aplican a un lote recibido.\","," recordPurchaseDialogTitle: \"Registrar compra — {{name}}\","," receivedLabel: \"Recibido\","," unitCostLabel: \"Costo unitario\","," unitCostWithCurrencyLabel: \"Costo unitario ({{code}})\","," costPlaceholderItemDefault: \"predeterminado del artículo\","," costPlaceholderRequired: \"requerido\","," lotNumberLabel: \"N.º de lote\","," expiryLabel: \"Vencimiento\","," recordPurchaseSubmitButton: \"Registrar compra\","," recordUsageDialogTitle: \"Registrar uso — {{name}}\","," depletedFlockSuffix: \" (agotado — solo para registrar fechas pasadas)\","," recordUsageSubmitButton: \"Registrar uso\","," correctStockDialogTitle: \"Corregir existencias — {{name}}\","," adjustTypeAdjustmentOption: \"Ajuste (±)\","," adjustTypeDiscardOption: \"Desecho (baja)\","," adjustQuantityPlaceholderDiscard: \"cantidad desechada\","," adjustQuantityPlaceholderCorrection: \"± corrección\","," recordCorrectionButton: \"Registrar corrección\","," ledgerDateHeader: \"Fecha\","," ledgerTypeHeader: \"Tipo\","," ledgerQuantityHeader: \"Cantidad\","," ledgerNoteHeader: \"Nota\","," noMovementsMessage: \"Aún no hay movimientos — registre una compra arriba.\","," closeButton: \"cerrar\","," categoryHeader: \"Categoría\","," onHandHeader: \"Disponible\","," defaultCostHeader: \"Costo predeterminado\","," openButton: \"abrir\","," // backfilling es for the Product catalog + packed-unit conversions screen"," // placeholders (no tags in this namespace). Active/Inactive status"," // on both tables goes through the `enums` statusLabel helper, not a key"," // here. Product/grade names and unitCode are free-form farm data and stay"," // raw — never routed through the catalog."," title: \"Productos\","," loadCatalogFailed: \"No se pudo cargar el catálogo. ¿Está la API activa?\","," enterPriceAsNumber: \"Ingrese el precio como un número simple.\","," \"Lo que vende la granja. Cada producto de huevo se asocia a un grado \""," + \"de huevo — las ventas toman existencias de los lotes de ese grado. \""," + \"Desactivar quita un producto de los selectores; el historial \""," + \"conserva su nombre.\","," newProductButton: \"Nuevo producto\","," newProductDialogTitle: \"Nuevo producto\","," editProductDialogTitle: \"Editar producto\","," pickGradeOption: \"Elegir un grado…\","," soldPerLabel: \"Se vende por\","," defaultPriceLabel: \"Precio predeterminado\","," defaultPriceWithCurrencyLabel: \"Precio predeterminado ({{code}})\","," priceOptionalPlaceholder: \"opcional\","," notesLabel: \"Notas\","," addProductButton: \"Agregar producto\","," eggsPerUnit: \"Huevos por {{unitCode}}\","," packedUnitDialogTitle: \"Unidad de empaque\","," eggsPerUnitFieldLabel: \"Huevos por unidad\","," activeCheckboxLabel: \"activo\","," noProductsMessage: \"Aún no hay productos.\","," soldPerHeader: \"Se vende por\","," defaultPriceHeader: \"Precio predeterminado\","," packedUnitsHeading: \"Unidades de empaque\","," \"Cuántos huevos contiene cada unidad al vender (un cartón es de 12, \""," + \"18 o 30 según su mercado — configure el suyo). Cambiar una unidad \""," + \"solo afecta las ventas futuras; los pedidos ya registrados \""," + \"conservan la cantidad con la que se vendieron.\","," unitHeader: \"Unidad\","," eggsPerUnitHeader: \"Huevos por unidad\","," alwaysOneMessage: \"siempre 1\","," // backfilling es for the Egg stock summary + drill-down screen (Task 18,"," // quantity values are free-form farm data and stay raw."," title: \"Existencias\","," loadStockFailed: \"No se pudieron cargar las existencias. ¿Está la API activa?\","," loadLotsFailed: \"No se pudieron cargar los lotes del grado.\","," loadMovementsFailed: \"No se pudieron cargar los movimientos del lote.\","," lotsButton: \"lotes\","," hideLotsButton: \"ocultar lotes\","," \"{{available}} huevos disponibles en {{grades}} grado(s). Restringido \""," + \"= en retiro de medicamentos, bloqueado para la venta.\","," lotsHeading: \"Lotes\","," noLotsMessage: \"Aún no hay lotes para este grado.\","," producedOnHeader: \"Fecha de producción\","," producedHeader: \"Producido\","," historyButton: \"historial\","," hideHistoryButton: \"ocultar historial\","," movementLedgerHeading: \"Registro de movimientos\","," \"Cada cambio en los huevos disponibles de este lote — la suma \""," + \"acumulada siempre es igual al saldo de arriba.\","," ledgerWhenHeader: \"Cuándo (UTC)\","," ledgerChangeHeader: \"Cambio\","," ledgerReasonHeader: \"Motivo\","," // backfilling es for the Flock roster + bird ledger screen (Task 19,"," // name/breed are free-form farm data and stay raw."," title: \"Lotes\","," loadMovementsFailed: \"No se pudieron cargar los movimientos.\","," newFlockButton: \"Nuevo lote\","," \"Agote cuando ya no queden aves; archive para ocultar un lote de los \""," + \"selectores y del panel. El historial sigue resolviendo los nombres \""," + \"de los lotes archivados.\","," breedLabel: \"Raza \","," addFlockButton: \"Agregar lote\","," editFlockDialogTitle: \"Editar lote\","," editNameLabel: \"Editar nombre\","," editBreedLabel: \"Editar raza\","," editPlacedLabel: \"Editar fecha de colocación\","," editCountLabel: \"Editar cantidad de aves\","," showArchivedLabel: \"mostrar {{count}} archivado(s)\","," noFlocksMessage: \"Aún no hay lotes.\","," breedHeader: \"Raza\","," placedHeader: \"Colocación\","," birdsHeader: \"Aves\","," ageWeeksSuffix: \"{{weeks}} sem\","," depleteButton: \"agotar\","," archiveButton: \"archivar\","," reactivateButton: \"reactivar\","," openLedgerButton: \"aves\","," closeLedgerButton: \"cerrar\","," depleteConfirmTitle: \"¿Agotar \\\"{{name}}\\\"?\","," \"El lote deja de aceptar nuevos registros. El registro de fechas \""," + \"pasadas (backfill) sigue funcionando.\","," depleteConfirmLabel: \"Agotar lote\","," archiveConfirmTitle: \"¿Archivar \\\"{{name}}\\\"?\","," \"Desaparece de los selectores y del panel, y no acepta nada nuevo.\","," archiveConfirmLabel: \"Archivar lote\","," ledgerHeading: \"Registro de aves — {{name}}\","," ledgerIntro: \"Las filas de mortalidad provienen de los registros diarios enviados.\","," \" Registre los descartes aquí; use un ajuste negativo para corregir un \""," + \"conteo incorrecto.\","," ledgerIntroWorkerNote: \" Registrar descartes y ajustes requiere un administrador.\","," recordMovementButton: \"Registrar movimiento\","," recordMovementDialogTitle: \"Registrar movimiento de aves\","," recordButton: \"Registrar\","," noMovementsMessage: \"Aún no hay movimientos — el lote está en su conteo inicial.\","," ledgerBirdsHeader: \"Aves\","," // namespace, backfilling es so Spanish mode renders translated text on the"," heading: \"Configuración de la granja\","," \"Cómo se llama esta granja, y la configuración regional, la zona \""," + \"horaria y la moneda en que registra y lee su trabajo.\","," loadFailedMessage: \"No se pudo cargar la configuración de la granja.\","," logoSectionHeading: \"Logotipo\","," logoAlt: \"Logotipo actual de la granja\","," logoLoadingMessage: \"Cargando el logotipo…\","," logoLoadFailedMessage: \"No se pudo cargar el logotipo.\","," logoNoneMessage: \"No hay logotipo configurado — la barra lateral muestra la marca de Cluckwork.\","," uploadLogoButton: \"Subir un logotipo\","," replaceLogoButton: \"Reemplazar el logotipo\","," removeLogoButton: \"Quitar\","," \"PNG, JPEG o WebP, de hasta {{cap}} y 4096 px por lado. No se aceptan \""," + \"imágenes animadas. La imagen se guarda reescrita, sin los metadatos \""," + \"de cámara ni ubicación.\","," \"Use una imagen cuadrada — el logotipo se muestra \""," + \"pequeño en la barra lateral, así que una marca simple y bien \""," + \"recortada (un símbolo o una sola letra) se ve mucho mejor ahí que \""," + \"una imagen ancha o detallada. Un fondo transparente sobre un diseño \""," + \"claro funciona mejor.\","," logoWorkingMessage: \"Procesando…\","," logoUpdatedMessage: \"Logotipo actualizado.\","," logoRemovedMessage: \"Logotipo eliminado.\","," logoOversizeMessage: \"Esa imagen pesa {{actualKb}} KB. El límite es {{limitKb}} KB.\","," removeLogoConfirmTitle: \"¿Quitar el logotipo de la granja?\","," \"La barra lateral vuelve a mostrar la marca de Cluckwork. Puede subir \""," + \"otro en cualquier momento.\","," removeLogoConfirmLabel: \"Quitar logotipo\","," localizationSectionHeading: \"Localización\","," farmNameLabel: \"Nombre de la granja\","," timezoneLabel: \"Zona horaria\","," \"Este navegador no reconoce esa zona horaria, así que las fechas aquí \""," + \"seguirían al dispositivo en lugar de a la granja. Elija una de la lista.\","," localeLabel: \"Configuración regional\","," currencyLabel: \"Moneda\","," \"La moneda está fija en {{code}}: esta granja ya registró montos en \""," + \"ella. El dinero registrado nunca se vuelve a valorar, así que \""," + \"cambiar esto dejaría cada total guardado con otro significado.\","," unitSystemLabel: \"Sistema de unidades\","," firstDayOfWeekLabel: \"Primer día de la semana\","," followLocaleOption: \"Seguir la configuración regional\","," paletteLegend: \"Paleta de la granja\","," \"El color de acento para todos en esta granja. Cada persona sigue \""," + \"eligiendo el modo claro o nocturno por sí misma.\","," paletteAubergine: \"Berenjena\","," paletteForest: \"Bosque\","," paletteSlate: \"Pizarra\","," paletteTerracotta: \"Terracota\","," dateFormatLabel: \"Formato de fecha\","," timeFormatLabel: \"Formato de hora\","," savingButton: \"Guardando…\","," saveButton: \"Guardar configuración\","," \"La zona horaria se aplica en todas partes en cuanto se guarda. La \""," + \"configuración regional, el sistema de unidades y los formatos \""," + \"personalizados se registran contra la granja y determinarán cómo \""," + \"se muestran los montos, las fechas y las medidas una vez que ese \""," + \"formato esté disponible.\","," savedMessage: \"Configuración guardada.\","," \"Otra persona cambió esta configuración mientras esta pantalla \""," + \"estaba abierta. Vuelva a cargar la página e inténtelo de nuevo.\","," \"Guardado. Esta pantalla no pudo volver a leer la configuración — \""," + \"vuelva a cargar la página antes de guardar de nuevo.\","," \"Guardado. El resto de la aplicación no pudo detectar el cambio — \""," + \"vuelva a cargar la página para asegurarse de que se aplicó en \""," + \"todas partes.\","," heading: \"Usuarios\","," newUserButton: \"Nuevo usuario\","," \"Los trabajadores registran el trabajo del día (opcionalmente \""," + \"limitado a los lotes asignados). Los gerentes además corrigen, \""," + \"anulan y configuran. Ventas gestiona clientes, pedidos y pagos. \""," + \"Solo lectura ve existencias, historial e informes. Administrador \""," + \"(propietario) hace todo, incluida la gestión de usuarios.\","," emailFieldLabel: \"Correo electrónico \","," passwordFieldLabel: \"Contraseña (mín. 12 caracteres) \","," nameFieldLabel: \"Nombre\","," roleFieldLabel: \"Rol\","," adminRoleOption: \"{{label}} (propietario)\","," createUserButton: \"Crear usuario\","," // #308 — re-confirmación de contraseña (machine-drafted, pending native review)"," stepUpFieldLabel: \"Tu contraseña actual \","," stepUpCreateHint: \"Crear otro propietario requiere volver a ingresar tu contraseña actual.\","," stepUpResetHint: \"Restablecer la contraseña de un propietario requiere volver a ingresar tu contraseña actual.\","," emailColumnHeader: \"Correo electrónico\","," nameColumnHeader: \"Nombre\","," roleColumnHeader: \"Rol\","," resetPasswordButton: \"contraseña\","," flocksButton: \"lotes\","," flockAccessTitle: \"Acceso a lotes — {{email}}\","," \"Sin asignaciones = el trabajador puede registrar para cualquier \""," + \"lote. La primera asignación lo limita solo a los lotes indicados.\","," noAssignmentsMessage: \"Sin asignaciones — acceso a toda la cuenta.\","," removeAssignmentButton: \"quitar\","," assignFlockButton: \"Asignar lote\","," doneButton: \"Listo\","," editUserTitle: \"Editar usuario — {{email}}\","," clearNameHint: \"Deje en blanco para borrar el nombre.\","," setPasswordTitle: \"Establecer contraseña — {{email}}\","," \"No necesita la contraseña actual. Al establecerla se cierra la \""," + \"sesión en todos los dispositivos — comunique la nueva contraseña \""," + \"directamente.\","," newPasswordFieldLabel: \"Nueva contraseña (mín. 12 caracteres) \","," confirmPasswordFieldLabel: \"Confirmar nueva contraseña \","," setPasswordButton: \"Establecer contraseña\","," createSuccessMessage: \"Cuenta de {{role}} creada para {{email}}.\","," passwordMismatchMessage: \"Las contraseñas no coinciden.\","," passwordSetMessage: \"Contraseña establecida para {{email}}. Se cerró la sesión en todos los dispositivos.\","," updatedMessage: \"Se actualizó {{email}}.\","," title: \"Gastos\","," expenseRecordedMessage: \"Gasto registrado.\","," expenseCorrectedMessage: \"Gasto corregido.\","," \"Este gasto fue cambiado por otra persona — el formulario ahora \""," + \"muestra los valores más recientes; vuelva a aplicar su corrección.\","," categoryCreatedMessage: \"Categoría creada.\","," categoryDeactivatedMessage: \"Categoría \\\"{{name}}\\\" desactivada.\","," categoryReactivatedMessage: \"Categoría \\\"{{name}}\\\" reactivada.\","," monthLabel: \"Mes\","," allCategoriesOption: \"Todas las categorías\","," hideCategoriesButton: \"ocultar categorías\","," manageCategoriesButton: \"gestionar categorías\","," monthTotalLabel: \"Total del mes: {{amount}}\","," categoriesHeading: \"Categorías de gastos\","," newCategoryButton: \"Nueva categoría\","," newCategoryDialogTitle: \"Nueva categoría de gasto\","," categoryNameLabel: \"Nombre de la categoría\","," addCategoryButton: \"Agregar categoría\","," deactivatedSuffix: \" (desactivada)\","," noCategoriesMessage: \"Aún no hay categorías — agregue una arriba.\","," recordExpenseHeading: \"Registrar un gasto\","," pickOption: \"— elegir —\","," descriptionLabel: \"Descripción\","," amountLabel: \"Monto ({{code}})\","," flockOptionalLabel: \"Lote (opcional)\","," noneOption: \"— ninguno —\","," noteOptionalLabel: \"Nota (opcional)\","," recordExpenseButton: \"Registrar gasto\","," addCategoryFirstMessage: \"Agregue una categoría primero — todo gasto necesita una.\","," correctExpenseDialogTitle: \"Corregir gasto\","," correctExpenseDialogTitleWithExpense: \"Corregir — {{date}}, {{description}}\","," noExpensesMessage: \"No hay gastos este mes.\","," descriptionHeader: \"Descripción\","," amountHeader: \"Monto\","," title: \"Clientes\","," newCustomerButton: \"Nuevo cliente\","," nameFieldLabel: \"Nombre \","," phoneFieldLabel: \"Teléfono \","," emailFieldLabel: \"Correo electrónico\","," addressFieldLabel: \"Dirección\","," noteFieldLabel: \"Nota\","," addCustomerButton: \"Agregar cliente\","," loadCustomersErrorMessage: \"No se pudieron cargar los clientes.\","," loadBalancesErrorMessage: \"No se pudieron cargar los saldos de los clientes.\","," noCustomersMessage: \"Aún no hay clientes.\","," phoneHeader: \"Teléfono\","," emailHeader: \"Correo electrónico\","," addressHeader: \"Dirección\","," outstandingHeader: \"Pendiente\","," // placeholders. \"Daily entry page\" (noEntriesMatch) is kept in English,"," // matching the existing sales.addCustomerFirst precedent of leaving an"," // unexternalized screen's name untranslated until dailyEntry itself is"," // added to TRANSLATED_NAMESPACES."," loadingTitle: \"Historial\","," title: \"Historial de entradas diarias\","," \"Las entradas presentadas y bloqueadas se pueden ajustar o anular \""," + \"aquí — las existencias y el registro de aves se actualizan \""," + \"automáticamente; los huevos ya vendidos nunca se modifican. \""," + \"Siempre se requiere un motivo.\","," \"Esta entrada acaba de cambiar en otro lugar — la lista se ha vuelto a cargar; vuelva a intentarlo.\","," loadFlocksGradesFailed: \"No se pudieron cargar los lotes/grados.\","," loadEntriesFailed: \"No se pudieron cargar las entradas.\","," \"Esta entrada fue cambiada por otra persona — el formulario muestra \""," + \"los valores más recientes; vuelva a aplicar su corrección.\","," nothingToAdjustMessage: \"Esta entrada ahora está {{status}} — no queda nada por ajustar.\","," \"Esta entrada fue cambiada por otra persona y la lista no se pudo \""," + \"volver a cargar — vuelva a cargar la página antes de reintentarlo.\","," \"Las cantidades clasificadas no pueden superar el total de huevos menos los agrietados/sucios/descartados.\","," entryAdjustedMessage: \"Entrada ajustada — las existencias y el registro de aves se actualizaron para coincidir.\","," adjustReloadFailedMessage: \"El ajuste se guardó, pero la lista no se pudo volver a cargar — actualice la página.\","," voidConfirmTitle: \"¿Anular la entrada del {{date}} para {{flock}}?\","," \"Sus lotes de huevos quedan vacíos y sus muertes se revierten. La \""," + \"entrada se conserva como Anulada. Se rechaza si alguno de sus \""," + \"huevos ya fue vendido.\","," voidConfirmLabel: \"Anular entrada\","," entryVoidedMessage: \"Entrada anulada — sus lotes de huevos quedaron vacíos y sus muertes se revirtieron.\","," voidReloadFailedMessage: \"La anulación se guardó, pero la lista no se pudo volver a cargar — actualice la página.\","," voidConflictMessage:"," \"Esta entrada fue cambiada por otra persona — la lista se ha vuelto a cargar; vuelva a intentarlo.\","," + \"volver a cargar — vuelva a cargar la página.\","," loadMoreFailedMessage: \"No se pudo cargar más.\","," allFlocksOption: \"Todos los lotes\","," adjustDialogTitle: \"Ajustar entrada\","," adjustDialogTitleWithEntry: \"Ajustar — {{date}}, {{flock}}\","," \"Ajustado anteriormente (total {{total}}, mortalidad {{mortality}} — \\\"{{reason}}\\\").\","," crackedLabel: \"Agrietados\","," deathsLabel: \"Muertes\","," inactiveGradeSuffix: \" (inactivo)\","," saveAdjustmentButton: \"Guardar ajuste\","," noEntriesMatch: \"Ninguna entrada coincide — registre una en la página Daily entry.\","," // Spanish words (ag/su/de) — confirm this reads clearly as a"," // table-header abbreviation."," lossesHeader: \"Pérdidas (ag/su/de)\","," gradedHeader: \"Clasificado\","," adjustButton: \"ajustar\","," voidButton: \"anular\","," statusVoided: \"Anulado\","," statusAdjusted: \"Ajustado\","," statusLocked: \"Bloqueado\","," lockedAt: \"Bloqueado {{time}}\","," statusSubmitted: \"Presentado\","," statusDraft: \"Borrador\","," // {{profit}} placeholders and the tag in profitLine."," title: \"Informes\","," productionHeading: \"Producción\","," sellableHeader: \"Vendible\","," deathsHeader: \"Muertes\","," henDaysHeader: \"Días-gallina\","," henDayPctHeader: \"% días-gallina\","," periodRowLabel: \"Período\","," gradeTotalsLabel: \"Por grado:\","," moneyHeading: \"Dinero\","," salesRowLabel: \"Ventas\","," \"{{count}} pedido(s) confirmado(s) — ingresos {{revenue}}, pagado {{paid}}, pendiente {{outstanding}}\","," salesVoidedSuffix: \" ({{count}} anulado(s))\","," expensesNone: \"sin registrar\","," expensesTotalSuffix: \" — total {{total}}\","," profitRowLabel: \"Ganancia (básica)\","," profitLine: \"ingresos {{revenue}} − gastos {{expenses}} = {{profit}}\","," \"La ganancia \\\"básica\\\" es el ingreso confirmado menos los gastos \""," + \"registrados — sin costo de bienes vendidos ni valoración de inventario.\","," // translated enums:auditAction./entityType. labels, not this namespace)."," heading: \"Registro de auditoría\","," \"Todo cambio correctivo, destructivo o de configuración — quién lo \""," + \"hizo, cuándo y por qué. Las filas se escriben junto con el cambio \""," + \"mismo y nunca se editan.\","," actionFilterLabel: \"Acción\","," allActionsOption: \"Todas las acciones\","," whenHeader: \"Cuándo (UTC)\","," whoHeader: \"Quién\","," actionHeader: \"Acción\","," reasonHeader: \"Motivo\","," emptyMessage: \"Aún no hay eventos de auditoría.\","," // Export screen. Keys mirror en.ts export exactly (no placeholders in this"," // namespace). The \"dataset.\" keys are DISPLAY labels for the dataset"," // picker (the wire value stays the raw slug) — translated to natural"," // Spanish per the task brief."," heading: \"Exportar\","," \"Descargue los datos de su cuenta como archivos CSV — una copia de \""," + \"seguridad manual que puede guardar donde quiera. Los valores \""," + \"monetarios se exportan en unidades menores (centavos) con su \""," + \"moneda, exactamente como se almacenan.\","," fullBackupHeading: \"Copia de seguridad completa\","," fullBackupButton: \"Descargar copia de seguridad completa (zip)\","," fullBackupHint: \"Un zip con todos los conjuntos de datos a continuación más un manifiesto de recuentos de filas.\","," preparingButton: \"Preparando…\","," singleDatasetsHeading: \"Conjuntos de datos individuales\","," \"dataset.flocks\": \"Parvadas\","," \"dataset.bird-movements\": \"Movimientos de aves\","," \"dataset.daily-entries\": \"Entradas diarias\","," \"dataset.daily-entry-grades\": \"Grados de entradas diarias\","," \"dataset.egg-grades\": \"Grados de huevo\","," \"dataset.egg-lots\": \"Lotes de huevo\","," \"dataset.customers\": \"Clientes\","," \"dataset.sales-orders\": \"Pedidos de venta\","," \"dataset.sales-order-items\": \"Artículos de pedidos de venta\","," \"dataset.sales-order-allocations\": \"Asignaciones de pedidos de venta\","," \"dataset.payments\": \"Pagos\","," \"dataset.inventory-items\": \"Artículos de inventario\","," \"dataset.inventory-lots\": \"Lotes de inventario\","," \"dataset.inventory-movements\": \"Movimientos de inventario\","," \"dataset.feed-usages\": \"Usos de alimento\","," \"dataset.water-usages\": \"Usos de agua\","," \"dataset.expense-categories\": \"Categorías de gastos\","," \"dataset.expenses\": \"Gastos\","," \"dataset.egg-inventory-movements\": \"Movimientos de inventario de huevo\","," \"dataset.audit-events\": \"Eventos de auditoría\","," // namespace, backfilling es for the closed-vocabulary enum labels"," \"status.Active\": \"Activo\","," \"status.Inactive\": \"Inactivo\","," \"status.Draft\": \"Borrador\","," \"status.Submitted\": \"Presentado\","," \"status.Locked\": \"Bloqueado\","," \"status.ManagerAdjusted\": \"Ajustado\","," \"status.Voided\": \"Anulado\","," \"status.Confirmed\": \"Confirmado\","," \"status.Shipped\": \"Enviado\","," \"status.Invoiced\": \"Facturado\","," \"status.Cancelled\": \"Cancelado\","," \"status.Depleted\": \"Agotado\","," \"status.Archived\": \"Archivado\","," \"role.Worker\": \"Trabajador\","," \"role.Admin\": \"Administrador\","," \"role.Manager\": \"Gerente\","," \"role.Sales\": \"Ventas\","," \"role.ReadOnly\": \"Solo lectura\","," \"waterSource.Well\": \"Pozo\","," \"waterSource.Municipal\": \"Municipal\","," \"waterSource.Tank\": \"Tanque\","," \"waterSource.Other\": \"Otro\","," \"gradeType.Size\": \"Tamaño\","," \"gradeType.Quality\": \"Calidad\","," \"gradeType.Custom\": \"Personalizado\","," \"inventoryCategory.Feed\": \"Alimento\","," \"inventoryCategory.Additive\": \"Aditivo\","," \"inventoryCategory.Medication\": \"Medicamento\","," \"inventoryCategory.Vaccine\": \"Vacuna\","," \"inventoryCategory.Packaging\": \"Empaque\","," \"inventoryCategory.Bedding\": \"Cama\","," \"inventoryCategory.Sanitation\": \"Saneamiento\","," \"inventoryCategory.EquipmentPart\": \"Pieza de equipo\","," \"inventoryCategory.Other\": \"Otro\","," \"inventoryMovement.Purchase\": \"Compra\","," \"inventoryMovement.Usage\": \"Uso\","," \"inventoryMovement.Adjustment\": \"Ajuste\","," \"inventoryMovement.Discard\": \"Desecho\","," \"flockMovement.Mortality\": \"Mortalidad\","," \"flockMovement.Cull\": \"Descarte\","," \"flockMovement.Adjustment\": \"Ajuste\","," \"stockMovement.Production\": \"Producción\","," \"stockMovement.Sale\": \"Venta\","," \"stockMovement.Adjustment\": \"Ajuste\","," \"stockMovement.Discard\": \"Desecho\","," \"stockMovement.InternalUse\": \"Uso interno\","," \"stockMovement.Transfer\": \"Transferencia\","," \"stockMovement.Reconciliation\": \"Conciliación\","," \"stockMovement.Void\": \"Anulado\","," \"unitSystem.Metric\": \"Métrico\","," \"unitSystem.Imperial\": \"Imperial\","," \"weekday.Sunday\": \"Domingo\","," \"weekday.Wednesday\": \"Miércoles\","," \"weekday.Thursday\": \"Jueves\","," \"weekday.Friday\": \"Viernes\","," \"weekday.Saturday\": \"Sábado\","," \"auditAction.DailyEntry.Adjust\": \"Entrada diaria ajustada\","," \"auditAction.DailyEntry.Void\": \"Entrada diaria anulada\","," \"auditAction.SalesOrder.Void\": \"Pedido de venta anulado\","," \"auditAction.Payment.Void\": \"Pago anulado\","," \"auditAction.Expense.Adjust\": \"Gasto ajustado\","," \"auditAction.ExpenseCategory.Update\": \"Categoría de gasto actualizada\","," \"auditAction.InventoryItem.Adjust\": \"Artículo de inventario ajustado\","," \"auditAction.WaterUsage.Correct\": \"Uso de agua corregido\","," \"auditAction.Flock.BirdMovement\": \"Movimiento de aves registrado\","," \"auditAction.Flock.Update\": \"Lote actualizado\","," \"auditAction.Flock.Deplete\": \"Lote agotado\","," \"auditAction.Flock.Archive\": \"Lote archivado\","," \"auditAction.Flock.Reactivate\": \"Lote reactivado\","," \"auditAction.EggGrade.Update\": \"Grado de huevo actualizado\","," \"auditAction.EggGrade.Activate\": \"Grado de huevo activado\","," \"auditAction.EggGrade.Deactivate\": \"Grado de huevo desactivado\","," \"auditAction.User.Create\": \"Usuario creado\","," \"auditAction.User.Update\": \"Usuario actualizado\","," \"auditAction.User.PasswordSet\": \"Contraseña establecida\","," \"auditAction.User.PasswordChanged\": \"Contraseña cambiada\","," \"auditAction.User.BreakGlassReset\": \"Restablecimiento de emergencia\","," \"auditAction.User.FlockAssign\": \"Lote asignado al usuario\","," \"auditAction.User.FlockUnassign\": \"Lote desasignado del usuario\","," \"auditAction.Account.Export\": \"Datos exportados\","," \"auditAction.Account.SetLogo\": \"Logotipo de la granja establecido\","," \"auditAction.Account.RemoveLogo\": \"Logotipo de la granja eliminado\","," \"auditAction.Account.UpdateSettings\": \"Configuración de la granja actualizada\","," \"auditAction.Product.Create\": \"Producto creado\","," \"auditAction.Product.Update\": \"Producto actualizado\","," \"auditAction.Product.Activate\": \"Producto activado\","," \"auditAction.Product.Deactivate\": \"Producto desactivado\","," \"auditAction.EggUnitConversion.Update\": \"Conversión de unidad de huevo actualizada\","," \"entityType.Account\": \"Cuenta\","," \"entityType.DailyEntry\": \"Entrada diaria\","," \"entityType.EggGrade\": \"Grado de huevo\","," \"entityType.EggUnitConversion\": \"Conversión de unidad de huevo\","," \"entityType.Expense\": \"Gasto\","," \"entityType.ExpenseCategory\": \"Categoría de gasto\","," \"entityType.FarmLogo\": \"Logotipo de la granja\","," \"entityType.Flock\": \"Lote\","," \"entityType.InventoryItem\": \"Artículo de inventario\","," \"entityType.Payment\": \"Pago\","," \"entityType.Product\": \"Producto\","," \"entityType.SalesOrder\": \"Pedido de venta\","," \"entityType.User\": \"Usuario\","," \"entityType.WaterUsage\": \"Uso de agua\","," // table). Keys mirror en.ts help exactly, including every / tag"," // — catalogParity enforces tag parity per key. Formal \"usted\" register,"," // matching the rest of this pack. Screen/feature names referenced in prose"," // (Entrada diaria, Historial, Ventas, etc.) are translated here, unlike the"," // older \"kept in English\" precedent noted at the top of this file — every"," // screen HelpPage references is already in TRANSLATED_NAMESPACES by now."," // The glossary table (h3 id=\"glossary\") is translated separately, near the"," // end of this block (Task 33, B6b) — tocGlossary above is just the rail's"," // link text."," eyebrow: \"Guía del usuario\","," heading: \"Ayuda\","," lead: \"Cómo funciona Cluckwork, pantalla por pantalla — y cómo deshacer errores.\","," contentsAriaLabel: \"Contenido de la ayuda\","," contentsEyebrow: \"Contenido\","," tocGettingAround: \"Cómo moverse\","," tocSigningIn: \"Iniciar sesión\","," tocDailyLoop: \"El ciclo diario\","," tocRoles: \"Quién puede hacer qué\","," tocDialogs: \"Agregar y corregir\","," tocDailyEntry: \"Entrada diaria\","," tocFlocks: \"Lotes y aves\","," tocGrades: \"Grados de huevo\","," tocProducts: \"Productos\","," tocStock: \"Existencias\","," tocInventory: \"Alimento e inventario\","," tocWater: \"Agua\","," tocSales: \"Clientes y ventas\","," tocReports: \"Informes\","," tocExpenses: \"Gastos\","," tocHistory: \"Historial\","," tocAudit: \"Registro de auditoría\","," tocExport: \"Exportar y respaldo\","," tocFarmSettings: \"Configuración de la granja\","," tocFarmPalette: \"Paleta de la granja\","," tocInstall: \"Instalar en un teléfono\","," tocMistakes: \"Corregir errores\","," tocGlossary: \"Glosario\","," gettingAroundHeading: \"Cómo moverse\","," \"En una computadora, cada pantalla está en la barra lateral de la izquierda, agrupada \""," + \"por función.\","," \"En un teléfono, las pantallas que más usa aparecen como pestañas en la parte \""," + \"inferior, al alcance del pulgar. Cuáles cuatro obtiene depende de su rol — un trabajador \""," + \"obtiene Entrada diaria, alguien de ventas obtiene Ventas. Todo lo demás está a un toque de \""," + \"distancia bajo Más.\","," \"Si una pantalla alguna vez muestra \\\"Algo salió mal\\\", eso es la aplicación \""," + \"capturando un error en lugar de dejarlo en una página en blanco. Todo lo que ya había guardado \""," + \"está a salvo (lo que todavía estaba escribiendo puede que deba ingresarlo de nuevo) — toque \""," + \"Recargar, o Volver al panel e inténtelo de nuevo. Si sigue \""," + \"sucediendo, abra \\\"Detalles del error\\\" y envíe una captura de pantalla.\","," signingInHeading: \"Iniciar sesión\","," \"Inicie sesión con el correo electrónico y la contraseña que configuró su administrador. Una \""," + \"contraseña incorrecta simplemente indica Correo electrónico o contraseña inválidos \""," + \"— inténtelo de nuevo.\","," \"Para frenar a cualquiera que intente adivinar contraseñas, los intentos de inicio de sesión desde \""," + \"el mismo lugar están limitados. Después de demasiados intentos en pocos minutos \""," + \"verá \\\"Demasiados intentos de inicio de sesión\\\" — eso no es una falla, solo \""," + \"espere unos minutos e inténtelo de nuevo. Estar ya conectado nunca se ve afectado; su \""," + \"trabajo continúa con normalidad.\","," \"Por separado, demasiadas contraseñas incorrectas para una cuenta bloquean brevemente \""," + \"esa cuenta. Mientras está bloqueada, incluso la contraseña correcta sigue indicando \""," + \"Correo electrónico o contraseña inválidos. El bloqueo es temporal — espere hasta \""," + \"unos 15 minutos e inténtelo de nuevo.\","," \"Su inicio de sesión se guarda de forma segura en su navegador y permanece activo mientras trabaja, \""," + \"incluso al recargar y con la aplicación abierta en varias pestañas a la vez. \""," + \"Después de que la aplicación se actualiza es posible que se le pida iniciar \""," + \"sesión una vez más — eso es normal.\","," \"Dos acciones en la pantalla Usuarios le piden volver a ingresar su contraseña \""," + \"actual directamente en el diálogo: crear otro propietario y restablecer la contraseña de un \""," + \"propietario existente. Esto confirma que realmente es usted antes de otorgar tanto acceso — ninguna \""," + \"otra acción en esa pantalla (crear un usuario Worker/Manager/Sales/Read-only, restablecer su \""," + \"contraseña) vuelve a preguntar.\","," \"Idioma de la interfaz. Cualquiera puede elegir el idioma en que se muestra la \""," + \"interfaz desde Cuenta → Preferencias — inglés, español o tagalo. La traducción es \""," + \"un trabajo en progreso: las pantallas de inicio de sesión y ventas, los mensajes de error, y \""," + \"Cuenta → Preferencias mismo están traducidos hoy; el resto de la pantalla de \""," + \"Cuenta (incluida la sección de contraseña) y el resto de la aplicación se están traduciendo \""," + \"pantalla por pantalla. Hasta que una pantalla esté traducida, simplemente se muestra en inglés, \""," + \"sea cual sea el idioma que eligió.\","," dailyLoopHeading: \"El ciclo diario\","," \"Todo en Cluckwork depende de una sola cadena: usted registra una entrada diaria por \""," + \"cada lote (huevos por grado, pérdidas, muertes), la envía, y al enviarla se crean \""," + \"lotes de huevos fechados — esas son sus existencias vendibles. Un \""," + \"pedido de venta toma de las existencias al confirmarlo, siempre los huevos más \""," + \"antiguos primero. El alimento fluye de la misma manera del lado de entrada: las compras ingresan \""," + \"alimento a las existencias, el uso diario las reduce por lote.\","," dailyLoopSummary: \"Registrar entrada → enviar → lotes de huevos → existencias → pedido → confirmar.\","," rolesHeading: \"Quién puede hacer qué\","," \"Cinco tipos de inicio de sesión. Los Trabajadores llevan a cabo el ciclo diario — \""," + \"registran y envían entradas, reciben alimento, registran el uso de alimento y agua, crean lotes y \""," + \"clientes, gestionan pedidos desde borrador hasta confirmación. Un trabajador puede restringirse a \""," + \"lotes asignados: sin asignaciones puede registrar para cualquier lote; la primera \""," + \"asignación lo restringe a los indicados.\","," \"Los Gerentes hacen todo lo que hacen los trabajadores, además de todo lo que \""," + \"deshace, corrige o configura: anulaciones, correcciones de existencias y agua, \""," + \"ciclo de vida de los lotes, sacrificios, los catálogos de grados/productos/artículos, gastos, \""," + \"informes de dinero, el registro de auditoría y las exportaciones.\","," \"Los inicios de sesión de Ventas gestionan clientes, pedidos y pagos \""," + \"— pero no captura de producción ni gastos. Los inicios de sesión de Solo lectura \""," + \"ven existencias, historial e informes, y no pueden cambiar nada.\","," \"Administrador (propietario) hace todo lo que hace un gerente y es el único rol que \""," + \"administra usuarios: crea inicios de sesión en la pantalla Usuarios (correo \""," + \"electrónico, contraseña, un nombre opcional y rol) y asigna trabajadores a lotes. El nombre de un \""," + \"usuario se puede cambiar más tarde desde la acción editar de la fila, y la acción \""," + \"contraseña establece una contraseña olvidada sin necesitar la anterior. Cambiar el \""," + \"rol de un usuario existente llega con una versión posterior. Los controles que no puede usar \""," + \"están ocultos, y el servidor los rechaza de todos modos.\","," \"Su propia contraseña. Cualquiera, en cualquier rol, puede cambiar su propia \""," + \"contraseña en la pantalla Cuenta ingresando la actual y una nueva (al menos 12 \""," + \"caracteres). Cambiarla — o que un administrador se la establezca — cierra la sesión de esa cuenta \""," + \"en cada otro dispositivo; el dispositivo en el que la cambió permanece con la sesión \""," + \"iniciada. Una sesión ya abierta en otro lugar puede seguir activa unos minutos antes de dejar de \""," + \"funcionar.\","," dialogsHeading: \"Agregar y corregir\","," \"Agregar y corregir ocurren en una ventana emergente. Busque el botón Nuevo … junto \""," + \"al título de la pantalla — nuevo grado, producto, cliente, lote, artículo, usuario, pedido. El \""," + \"enlace editar o corregir de cada fila abre la misma ventana \""," + \"emergente con los valores de esa fila ya completados.\","," \"Las vistas detalladas funcionan de la misma manera. Abra el libro mayor de aves de \""," + \"un lote para registrar un sacrificio, un artículo de inventario para registrar una compra, uso de \""," + \"alimento o una corrección de existencias, un pedido para registrar un pago, o los \""," + \"lotes de un trabajador para gestionar su acceso — el libro mayor permanece donde \""," + \"está y el formulario viene a usted.\","," \"Cancelar, Escape, o un clic fuera cierra la ventana emergente, no registra nada y \""," + \"borra lo que escribió — al volver a abrirla empieza con un formulario en blanco. Si un guardado \""," + \"falla, la ventana permanece abierta con sus valores y el motivo, para que pueda corregirlo e \""," + \"intentarlo de nuevo — reintentar es seguro, nunca registra lo mismo dos veces.\","," \"Las pantallas cuyo único trabajo es la captura mantienen su formulario en la página: Entrada \""," + \"diaria, Agua, registrar un gasto, y agregar líneas a un pedido en \""," + \"borrador. Las que usa todos los días — sin clic adicional.\","," \"Los conteos de números enteros — conteos de huevos, conteos de aves, cantidades de venta, huevos por \""," + \"unidad — tienen botones − y + del tamaño del pulgar: toque para \""," + \"uno, mantenga presionado para acelerar. La cantidad de una línea de venta nunca \""," + \"baja de 1. Los precios y montos fraccionarios se siguen escribiendo.\","," \"Las acciones que no se pueden deshacer preguntan primero. Enviar un día, confirmar \""," + \"o cancelar un pedido, agotar o archivar un lote — cada una indica lo que está por suceder y \""," + \"espera. El teclado comienza en Cancelar, para que presionar Enter por costumbre \""," + \"nunca lo confirme. Un botón rojo significa que la acción deshace o retira algo: \""," + \"anular, cancelar un borrador, agotar, archivar. Enviar un día y confirmar un pedido tampoco se \""," + \"pueden deshacer, pero son la forma normal de avanzar en la semana.\","," \"Las anulaciones necesitan un motivo. Anular una entrada diaria, un pago o un \""," + \"pedido confirmado pregunta de la misma manera pero primero solicita un motivo por escrito — se \""," + \"guarda con la anulación y se muestra dondequiera que ese registro aparezca después, así que \""," + \"escriba lo que realmente sucedió. Déjelo vacío y la ventana emergente lo indica en el momento, \""," + \"conservando lo que haya escrito.\","," dailyEntryHeading: \"Entrada diaria\","," \"Elija el lote y la fecha en la parte superior, luego trabaje en dos paneles uno al lado del otro: \""," + \"1 Conteo de huevos (total, rotos, sucios, descartados, muertes) y 2 \""," + \"Clasificación. Los conteos producen una cifra vendible, y ese es el \""," + \"número al que deben sumar los grados — nunca pueden superarlo.\","," \"La clasificación cuenta hacia abajo. Junto a los grados se muestra cuántos huevos \""," + \"vendibles le quedan por ubicar; se pone verde en cuanto el día cuadra y rojo si se excede. No \""," + \"puede enviar mientras esté excedido.\","," \"Cada conteo tiene botones − y +. Toque para uno, o mantenga \""," + \"presionado — se acelera a medida que avanza, así que unos cientos de huevos toman \""," + \"aproximadamente un segundo. Más fácil que un teclado numérico con guantes puestos. El \""," + \"+ de un grado se detiene una vez que el día está completamente clasificado, para \""," + \"que no pueda excederse con él.\","," \"La mayoría de los días terminan de la misma manera — un grado se lleva lo que queda. Poner \""," + \"todo en… junto al conteo restante lo hace en un solo movimiento: arrástrelo a un grado, o \""," + \"tóquelo y elija uno.\","," \"Ambos botones de guardar permanecen en una barra en la parte inferior de la pantalla mientras se \""," + \"desplaza. En un teléfono esa barra también muestra el conteo vendible y cuántos quedan, para que \""," + \"nunca pierda de vista si el día cuadra.\","," \"Guardar borrador mantiene el día editable. Enviar lo hace oficial: \""," + \"crea los lotes de huevos del día y registra las muertes en el libro mayor de aves del lote. Los \""," + \"trabajadores ya no pueden editarlo — un administrador puede ajustarlo o anularlo (vea \\\"Corregir \""," + \"errores\\\").\","," \"Las entradas enviadas se bloquean automáticamente después de 7 días. Bloqueada \""," + \"solo significa que la ventana de corrección para arreglos rutinarios ha pasado — el \""," + \"ajuste/anulación por parte de un administrador aún funciona en entradas bloqueadas.\","," \"\\\"Hoy\\\" significa el hoy de su granja, no el reloj de alguna otra parte del mundo. \""," + \"Puede registrar cualquier día hasta e incluyendo ese; un día que aún no ha ocurrido en la granja \""," + \"se rechaza — aquí y en todos los demás lugares donde ingresa una fecha: uso de alimento y agua, \""," + \"compras de alimento y correcciones de existencias, gastos, pagos, y la fecha de colocación de un \""," + \"lote. La misma fecha decide cuándo los huevos salen de un período de retiro, qué huevos puede \""," + \"tomar una venta, el día en que un lote se agota o archiva, y el rango en que se abren los informes \""," + \"— para que nada discrepe sobre qué día es.\","," \"Una entrada por lote por día. Reabrir un día que tiene un borrador lo carga para edición y muestra \""," + \"una insignia de Editando borrador junto al título, para que retomar el trabajo \""," + \"guardado nunca parezca empezar de cero. Si el precargado falla, guardar se bloquea hasta que tenga \""," + \"éxito, para que un borrador existente nunca se sobrescriba en silencio.\","," \"Los lotes agotados aceptan entradas retroactivas hasta su fecha de agotamiento; los lotes \""," + \"archivados no aceptan ninguna.\","," flocksHeading: \"Lotes y aves\","," \"Las aves actuales de un lote = su conteo inicial menos todo lo registrado en su \""," + \"libro mayor de aves: muertes (agregadas automáticamente al enviar entradas), \""," + \"sacrificios (aves retiradas deliberadamente — vendidas, sacrificadas, regaladas), \""," + \"y ajustes manuales (correcciones de conteo, en cualquier dirección).\","," \"Ciclo de vida: Activo (normal) → Agotado (aves ya no quedan; el \""," + \"historial permanece, se permite retroactivo) → Archivado (oculto del trabajo \""," + \"diario). Agotar y archivar piden confirmación; ambos son reversibles con Reactivar.\","," \"Cualquiera puede crear un lote y ver el libro mayor de aves. Editar un lote, los cambios de ciclo \""," + \"de vida y registrar sacrificios/ajustes son solo para administradores.\","," gradesHeading: \"Grados de huevo\","," \"Los grados son las categorías de clasificación de su granja — tamaños (Grande…), calidades \""," + \"(Roto…), o personalizados. Solo los grados vendibles aparecen en la captura de \""," + \"entradas y en los pedidos; las categorías no vendibles son de contabilidad.\","," \"Los grados nunca se eliminan. Desactivar elimina un grado de la captura y de los \""," + \"selectores de pedidos: sus existencias siguen contándose y las líneas de pedido agregadas antes \""," + \"aún pueden confirmarse, pero no se puede colocar en líneas de pedido nuevas — reactive el \""," + \"grado para vender las existencias restantes. El historial sigue mostrando su nombre.\","," gradesAdminOnly: \"El catálogo de grados es configuración — administrarlo es solo para administradores.\","," productsHeading: \"Productos (admin)\","," \"Los productos son lo que vende — \\\"Huevos Grandes por docena\\\", \\\"Cartón mixto\\\". Cada producto de \""," + \"huevo apunta a un grado de huevo (de ahí vienen sus existencias) y lleva una unidad de venta y un \""," + \"precio predeterminado opcional. Por ahora solo existen productos de huevo.\","," \"Las unidades empacadas establecen cuántos huevos contiene cada unidad — su cartón \""," + \"podría ser de 12, 18 o 30. Cambiar una unidad solo afecta las ventas futuras; los pedidos pasados \""," + \"conservan el conteo con el que se vendieron.\","," stockHeading: \"Existencias\","," \"Cada grado se expande en sus lotes (uno por día enviado), y cada lote en su \""," + \"libro mayor de movimientos — una línea explícita por cada producción, venta, \""," + \"corrección o anulación. La suma acumulada siempre es igual al saldo mostrado; nada cambia las \""," + \"existencias sin dejar una línea.\","," \"Las existencias son la suma de sus lotes de huevos por grado. La columna restringido \""," + \"está reservada para períodos de retiro por medicación — esa función llega con el seguimiento de \""," + \"medicación. Nada marca huevos como restringidos todavía, así que el sistema no impone \""," + \"tiempos de retiro hoy — gestione los períodos de retiro fuera de Cluckwork por ahora.\","," stockFifo: \"Vender siempre toma primero los lotes más antiguos, para que las existencias roten naturalmente.\","," inventoryHeading: \"Alimento e inventario\","," \"Los artículos definen lo que rastrea (alimento, suplementos…) y la unidad en que se \""," + \"mide. La unidad se bloquea una vez que se han recibido existencias — las cantidades registradas \""," + \"deben seguir significando lo que significaban.\","," \"Registrar compra asienta las existencias recibidas como un lote fechado con su \""," + \"costo. Registrar uso anota lo que comió un lote en un día: toma de los lotes más \""," + \"antiguos primero (solo lotes que existían en esa fecha) y estima el costo a partir de los lotes \""," + \"realmente consumidos.\","," \"Cada cambio queda registrado en el libro mayor de movimientos del artículo — \""," + \"compras, uso, correcciones. Las filas del libro mayor nunca se editan ni se eliminan.\","," \"Los errores tipográficos y el deterioro se corrigen con correcciones: un \""," + \"Ajuste (en cualquier dirección) o un Descarte (baja) contra un lote específico, \""," + \"siempre con un motivo. La fila original y la corrección permanecen visibles.\","," \"Registrar compras y uso está abierto para todos; el catálogo de artículos y las correcciones de \""," + \"existencias son solo para administradores.\","," waterHeading: \"Agua\","," \"Registre lo que bebió cada lote por día: una cantidad directa (litros o galones) o lecturas \""," + \"de medidor — la cantidad es entonces la diferencia del medidor (final − inicial).\","," \"Los registros de agua no tienen existencias detrás, así que los errores se corrigen \""," + \"corrigiendo el registro directamente (el botón \\\"corregir\\\", solo para \""," + \"administradores) — sin asientos de compensación. El lote y la fecha son fijos: si se eligió mal, \""," + \"regístrelo de nuevo bajo el correcto.\","," \"Misma regla de ciclo de vida que en todas partes: los lotes agotados aceptan retroactivos hasta su \""," + \"fecha de agotamiento, los archivados no aceptan nada.\","," salesHeading: \"Clientes y ventas\","," \"Los pedidos comienzan como borradores: agregue líneas eligiendo un \""," + \"producto, una unidad empacada (docena, cartón, …), una cantidad, y un precio por \""," + \"unidad (precargado desde el valor predeterminado del producto) — edite libremente, o \""," + \"cancele (el borrador se conserva, de solo lectura). Cada línea recuerda cuántos \""," + \"huevos contenía su unidad cuando se agregó, así que redefinir un cartón más tarde nunca cambia \""," + \"pedidos antiguos.\","," \"Confirmar un pedido asigna existencias reales — los lotes más antiguos primero — y \""," + \"es el punto donde el inventario cambia de manos.\","," \"Una confirmación errónea se deshace con Anular (solo administrador, motivo \""," + \"requerido): los huevos regresan exactamente a los lotes de donde vinieron, y el pedido queda \""," + \"listado como Anulado. Anular es para errores, no para devoluciones de mercancía entregada. (Los \""," + \"pedidos confirmados antes de que existiera el seguimiento de asignación a nivel de lote no pueden \""," + \"anularse por su cuenta — consulte a su administrador.)\","," \"Pagos (Ventas, Gerente, o administrador — anular un pago es solo para \""," + \"administrador/gerente): el panel de un pedido confirmado muestra su historial de liquidación — \""," + \"registre pagos parciales (fecha, monto, método, referencia opcional) hasta que el saldo pendiente \""," + \"llegue a cero; el sobrepago se rechaza. Un pago erróneo se anula (motivo \""," + \"requerido) y el saldo pendiente vuelve a crecer. Un pedido con pagos no se puede anular hasta que \""," + \"sus pagos se anulen primero. La pantalla de Clientes muestra el saldo pendiente de cada cliente.\","," reportsHeading: \"Informes\","," \"Producción (todos): elija un rango de fechas — huevos por día, pérdidas, \""," + \"vendibles, muertes, y % de puesta diaria (huevos recolectados ÷ aves vivas ese \""," + \"día × 100), con totales del período y un desglose por grado. Las entradas en borrador y anuladas \""," + \"no cuentan.\","," \"Dinero (admin): resumen de ventas de los pedidos del rango (ingresos / pagado / \""," + \"pendiente), gastos por categoría, y ganancia básica — ingresos confirmados menos \""," + \"gastos registrados, sin costo de bienes vendidos.\","," expensesHeading: \"Gastos (admin)\","," \"Registre el dinero que sale: fecha, categoría, descripción y monto (en la moneda de la granja), \""," + \"opcionalmente vinculado a un lote. El selector de mes muestra un total acumulado; las categorías \""," + \"se administran en la misma pantalla (desactivar una la oculta de los gastos nuevos — los ya \""," + \"registrados la conservan).\","," \"Las correcciones editan el gasto en su lugar (corregir en la fila). Si alguien más \""," + \"lo corrigió primero, el formulario recarga sus valores y le pide volver a aplicar. La moneda en \""," + \"que se registró un gasto nunca cambia.\","," \"Los gastos son datos de dinero, así que toda la pantalla — incluida la visualización — es solo \""," + \"para administradores, a diferencia de las pantallas de producción donde los trabajadores registran.\","," historyHeading: \"Historial\","," \"Explore las entradas diarias registradas de más reciente a más antigua, filtradas por lote y rango \""," + \"de fechas. La columna de estado muestra la vida de la entrada: Borrador, Enviada, Bloqueada (7+ \""," + \"días), Ajustada (pase el cursor para ver el motivo), o Anulada.\","," \"Los administradores corrigen desde aquí: ajustar abre los números de la entrada \""," + \"para edición (motivo requerido), anular deshace toda la entrada. Las existencias \""," + \"y el libro mayor de aves se actualizan automáticamente.\","," \"Las filas en borrador tienen un enlace editar (todos, no solo administradores) que \""," + \"salta de vuelta a la pantalla de Entrada diaria con ese lote y día cargados — los borradores se \""," + \"editan ahí, no se ajustan.\","," auditHeading: \"Registro de auditoría (admin)\","," \"Todo cambio correctivo, destructivo o de configuración queda en el registro de auditoría \""," + \"automáticamente: quién lo hizo, cuándo (UTC), qué afectó, y el motivo cuando se dio uno. Se \""," + \"escribe junto con el cambio mismo — una acción fallida no deja rastro, una exitosa siempre lo hace \""," + \"— y nunca es editable, por nadie.\","," exportHeading: \"Exportar y respaldo (admin)\","," \"La pantalla de Exportar descarga sus datos como archivos CSV que puede abrir en cualquier hoja de \""," + \"cálculo — un conjunto de datos a la vez, o todo de una vez como un zip (el respaldo \""," + \"completo, con un manifiesto de conteos de filas). Guarde una copia en un lugar seguro \""," + \"según su propio calendario; los respaldos automáticos programados llegan en una fase posterior.\","," \"Las columnas de dinero contienen unidades menores (centavos) más la moneda — valores exactos, no \""," + \"formato de presentación. Las fechas son ISO (AAAA-MM-DD), y las marcas de tiempo son UTC.\","," farmSettingsHeading: \"Configuración de la granja (admin)\","," \"Configuración → Configuración de la granja contiene el nombre de la granja y las \""," + \"cuatro cosas que deciden cómo se lee todo: zona horaria, configuración \""," + \"regional, moneda y sistema de unidades. El primer día de \""," + \"la semana y los formatos de fecha y hora son opcionales — déjelos en blanco y la configuración \""," + \"regional decide. La zona horaria surte efecto en todas partes en el momento en que se guarda; el \""," + \"resto se registra contra la granja e influirá en cómo se muestran los montos, las fechas y las \""," + \"medidas una vez que ese formato esté disponible.\","," \"La zona horaria es el día de la granja. Cada campo que registra cuándo sucedió \""," + \"algo — entrada diaria, lotes, agua, uso y compras de alimento, gastos, pedidos y pagos — se \""," + \"abre en ella y se niega a ir más allá, sea cual sea el día en el teléfono o la laptop que tiene en \""," + \"la mano, para que un dispositivo adelantado a la granja ya no pueda ofrecer una fecha que el \""," + \"guardado luego rechace. Las fechas que están destinadas a estar en el futuro no tienen tope: la \""," + \"caducidad de un lote de alimento, y los rangos de fechas por los que filtra \""," + \"Historial y Agua.\","," \"La moneda se bloquea en el momento en que la granja registra su primer monto — una \""," + \"venta, un pago, un gasto, un producto con precio, o dinero gastado en alimento. El campo se \""," + \"muestra bloqueado con el motivo en lugar de dejarle escribir un código que sería rechazado. Nada \""," + \"de lo ya registrado se vuelve a fijar de precio jamás, que es exactamente por qué se bloquea.\","," \"El logotipo reemplaza la marca de Cluckwork en la barra lateral para todos en la \""," + \"granja. PNG, JPEG o WebP, hasta el límite de tamaño mostrado en la pantalla (2 MB por defecto) y \""," + \"4096 píxeles por lado. Las imágenes animadas se rechazan en lugar de aplanarse. Lo que se guarda \""," + \"es una copia reconstruida: los detalles de cámara y ubicación se eliminan al ingresar — una foto \""," + \"tomada en un teléfono lleva dónde se tomó, y para una granja eso es su dirección. Elimínelo y la \""," + \"barra lateral vuelve a la marca de Cluckwork.\","," \"Use un logotipo cuadrado. Se muestra pequeño en la barra lateral, así que una \""," + \"marca simple y bien recortada — un símbolo o una sola letra — se ve mucho mejor ahí que un \""," + \"logotipo ancho o una imagen detallada, que se reducen a algo ilegible. Conserve un logotipo \""," + \"detallado para impresión o un sitio web; dele a la aplicación una marca pequeña y limpia.\","," farmPaletteHeading: \"Paleta de la granja\","," \"La configuración de la granja permite a un administrador elegir el color de acento usado en toda \""," + \"la aplicación para todos en la granja: Berenjena, Bosque, Pizarra o Terracota. La elección se \""," + \"aplica al guardar, y todos la ven la próxima vez que carga su aplicación.\","," \"El modo claro y nocturno son independientes y personales. Cada persona elige el suyo con el \""," + \"interruptor en la barra lateral, en cada dispositivo, y la paleta de la granja nunca lo anula — \""," + \"cada paleta está diseñada para funcionar en ambos.\","," installHeading: \"Instalar en un teléfono\","," \"Cluckwork se puede agregar a la pantalla de inicio de un teléfono o tableta, donde obtiene su \""," + \"propio ícono y se abre en su propia ventana sin las barras del navegador — más espacio para las \""," + \"pantallas de entrada y más rápido de alcanzar en el galpón. Es la misma aplicación, no una \""," + \"descarga separada, así que no hay nada que actualizar desde una tienda de aplicaciones.\","," \"Android (Chrome): abra el menú y elija Instalar aplicación o \""," + \"Agregar a pantalla de inicio. iPhone/iPad (Safari): toque \""," + \"Compartir, luego Agregar a pantalla de inicio.\","," \"Instalar solo se ofrece a través de una dirección segura (https). Si su granja \""," + \"accede a Cluckwork en una dirección http simple, la opción simplemente no \""," + \"aparecerá — nada está roto, y la aplicación funciona exactamente como en el navegador.\","," \"Instalar no hace que la aplicación funcione sin conexión. Todavía necesita una \""," + \"conexión para cargar y guardar; solo las propias pantallas de la aplicación se guardan en el \""," + \"dispositivo para que inicie rápido. Registrar sin conexión es trabajo planeado, no algo que \""," + \"instalar active.\","," \"Cuando se publica una nueva versión verá \\\"Una nueva versión de Cluckwork está \""," + \"lista\\\". Espera a que usted esté listo en lugar de recargar mientras está escribiendo — \""," + \"presione Recargar cuando le convenga, o Más tarde y volverá a \""," + \"preguntar la próxima vez. No se pierde nada por dejarlo.\","," mistakesHeading: \"Corregir errores\","," \"Cada corrección en esta tabla necesita un inicio de sesión de administrador (vea \\\"Quién puede \""," + \"hacer qué\\\") — los trabajadores registran, los administradores corrigen. La única excepción: un \""," + \"borrador todavía se está registrando, no corrigiendo, así que los trabajadores editan sus \""," + \"propios borradores.\","," mistakesTableMistakeHeader: \"Error\","," mistakesTableFixHeader: \"Corrección\","," mistakesRow1Mistake: \"Agotó o archivó el lote equivocado\","," mistakesRow1Fix: \"Lotes → Reactivar (totalmente reversible)\","," mistakesRow2Mistake: \"Conteo de aves incorrecto\","," mistakesRow2Fix: \"Lotes → libro mayor de aves → Ajuste (en cualquier dirección)\","," mistakesRow3Mistake: \"Confirmó el pedido de venta equivocado\","," \"Ventas → abra el pedido → Anular pedido (las existencias regresan a sus lotes; \""," + \"motivo requerido). Si se registraron pagos en él, anúlelos primero.\","," mistakesRow4Mistake: \"Registró un pago incorrecto\","," \"Ventas → abra el pedido → pagos → anular (motivo requerido): la fila se conserva y \""," + \"el saldo pendiente vuelve a crecer.\","," mistakesRow5Mistake: \"Cantidad incorrecta en una compra de alimento / alimento echado a perder\","," \"Inventario → abra el artículo → Corregir existencias (Ajuste o Descarte contra el \""," + \"lote; motivo requerido). Solo las cantidades son corregibles — un costo, fecha o número de lote \""," + \"incorrecto aún no se puede corregir, así que verifique eso antes de guardar.\","," mistakesRow6Mistake: \"Uso de alimento sobre o subregistrado\","," \"Mismo formulario de corrección: un Ajuste positivo devuelve al lote las existencias usadas de más \""," + \"(hasta lo que recibió); uno negativo elimina existencias subregistradas. El registro de uso en sí \""," + \"y su estimación de costo permanecen como se registraron — las correcciones arreglan las \""," + \"existencias, no el historial.\","," mistakesRow7Mistake: \"Registro de agua incorrecto\","," \"Agua → corregir en el registro — cantidades, fuente, medidores y nota se editan en \""," + \"su lugar (sin existencias detrás del agua). El lote y la fecha son fijos: si se eligió mal, \""," mistakesRow8Mistake: \"Números incorrectos en una entrada diaria enviada\","," \"Historial → ajustar (admin) — totales, pérdidas, mortalidad y desglose por grado, \""," + \"con un motivo requerido. Las existencias y el libro mayor de aves se actualizan para coincidir \""," + \"automáticamente, pero los huevos ya vendidos nunca se pueden descontar: reducir un grado por \""," + \"debajo de lo vendido se rechaza. Los valores anteriores permanecen visibles en la entrada.\","," mistakesRow9Mistake: \"Toda la entrada enviada está equivocada (lote o día incorrecto)\","," \"Historial → anular (admin, motivo requerido): sus lotes de huevos se vacían, sus \""," + \"muertes se revierten en el libro mayor de aves, y la entrada se conserva como Anulada. Se rechaza \""," + \"si alguno de sus huevos ya se vendió — anule la venta primero. Anular libera el día: la entrada \""," + \"correcta puede entonces registrarse para el mismo lote y fecha.\","," mistakesRow10Mistake: \"Error en una entrada u orden en borrador\","," \"Edítela — los números del borrador, las líneas de grado y las líneas de pedido son todas editables \""," + \"(entradas en borrador: Historial → editar salta a la pantalla de Entrada diaria \""," + \"con el día cargado). El lote/fecha de una entrada y el cliente/fecha de un pedido son fijos, sin \""," + \"embargo: si se eligió mal, simplemente regístrelo de nuevo bajo el correcto (y cancele el pedido \""," + \"en borrador equivocado).\","," // glossary table (37 rows) + closing repo-note, formal \"usted\" register"," // matching the rest of this pack. Keys and tags mirror en.ts exactly —"," // catalogParity enforces key-set and tag parity. The"," // \"specs/product/GLOSSARY.md\" path inside glossaryRepoNote's tag"," // is kept literal (untranslated), per the Task 33 brief."," glossaryHeading: \"Glosario\","," glossaryNavigationTerm: \"Navegación\","," \"En una computadora, las pantallas están en la barra lateral izquierda; en un teléfono, las cuatro \""," + \"que más usa aparecen como pestañas en la parte inferior, y el resto está bajo Más.\","," glossaryOperationalDayTerm: \"Día operativo\","," \"Las fechas significan el día calendario de su granja, calculado según la zona horaria propia de la \""," + \"granja y no la de un reloj en otro lugar. Es el mismo \\\"hoy\\\" en todas partes: lo que cuenta como \""," + \"fecha futura al registrar trabajo, cuándo salen los huevos de un período de retiro, qué huevos \""," + \"puede tomar una venta, el día en que se agota o archiva un lote, y el rango en que se abren los \""," + \"informes. Todo campo que registra CUÁNDO OCURRIÓ ALGO se abre en ese día y no permite ir más \""," + \"allá, sin importar en qué día esté el dispositivo que tiene en la mano. Las fechas que deben caer \""," + \"en el futuro no tienen ese límite — el vencimiento de un lote de alimento, y los filtros de \""," glossaryInstallToHomeScreenTerm: \"Instalar en la pantalla de inicio\","," \"Agregar Cluckwork a la pantalla de inicio de un teléfono o tableta desde el navegador, para que \""," + \"tenga su propio ícono y se abra en su propia ventana sin las barras del navegador. Es la misma \""," + \"aplicación, no una descarga aparte — nada que actualizar desde una tienda de aplicaciones. Solo se \""," + \"ofrece por una dirección segura (https), y no hace que la aplicación funcione sin \""," + \"conexión: todavía necesita conexión para cargar y guardar.\","," glossaryNewVersionReadyTerm: \"Hay una nueva versión disponible\","," \"Después de un lanzamiento, una aplicación instalada detecta la nueva versión en segundo plano y \""," + \"pregunta antes de cambiar, en lugar de recargar mientras está escribiendo. Presione Recargar \""," + \"cuando le convenga, o Más tarde y volverá a preguntar la próxima vez. No se pierde nada por \""," + \"dejarlo — la aplicación en ejecución sigue funcionando hasta que acepte.\","," glossaryTooManySignInAttemptsTerm: \"Demasiados intentos de inicio de sesión\","," \"El inicio de sesión tiene un límite de frecuencia para frenar los intentos de adivinar contraseñas: \""," + \"demasiados intentos desde un mismo lugar en pocos minutos se rechazan con este mensaje hasta que \""," + \"pasa un breve período de espera. Nunca afecta a una sesión que ya inició.\","," glossaryStepUpAuthTerm: \"Autenticación reforzada (step-up)\","," \"Una comprobación adicional además de haber iniciado sesión: antes de crear otro propietario o \""," + \"restablecer la contraseña de un propietario existente, la pantalla Usuarios le pide volver a \""," + \"ingresar su contraseña actual directamente en el diálogo. Esto confirma que realmente es usted \""," + \"antes de otorgar tanto acceso — ninguna otra acción en esa pantalla vuelve a preguntar.\","," glossarySomethingWentWrongScreenTerm: \"Pantalla \\\"Algo salió mal\\\"\","," \"Lo que muestra una pantalla cuando encuentra un error, en lugar de quedar en blanco. Los datos \""," + \"guardados están seguros — es posible que deba volver a escribir lo que aún estaba ingresando; \""," + \"toque Recargar o Volver al panel. \\\"Detalles del error\\\" contiene el mensaje para una captura de \""," + \"pantalla.\","," glossaryDailyEntryTerm: \"Entrada diaria\","," glossaryDailyEntryDef: \"El día de un lote: huevos por grado, pérdidas, muertes. Borrador hasta que se envía.\","," glossaryEggLotTerm: \"Lote de huevos\","," \"Un lote fechado de huevos vendibles de un grado, creado al enviar una entrada. Las existencias son \""," + \"la suma de los lotes.\","," glossaryGradeDef:"," \"Una categoría de clasificación (tamaño, calidad o personalizada). Los grados vendibles se pueden \""," + \"vender.\","," glossaryEggMovementLedgerTerm: \"Libro mayor de movimientos de huevos\","," \"El historial línea por línea detrás del saldo de un lote de huevos: producción que entra, ventas \""," + \"que salen, correcciones y anulaciones con su signo correspondiente.\","," \"\\\"Primero en entrar, primero en salir\\\" — las ventas y el uso de alimento siempre toman primero las \""," + \"existencias más antiguas.\","," glossaryCullTerm: \"Descarte\","," glossaryCullDef:"," \"Aves retiradas deliberadamente de un lote (vendidas, sacrificadas, regaladas) — no son muertes.\","," glossaryMortalityTerm: \"Mortalidad\","," \"Muertes, registradas en la entrada diaria; llegan al libro mayor de aves automáticamente al enviar.\","," glossaryDepleteTerm: \"Agotar\","," \"Marcar un lote como sin aves restantes. El historial se conserva; reversible mediante Reactivar.\","," glossaryArchiveTerm: \"Archivar\","," glossaryArchiveDef: \"Ocultar un lote terminado del trabajo diario. Reversible mediante Reactivar.\","," glossaryWithdrawalRestrictionTerm: \"Restricción de retiro\","," \"Una retención sobre los huevos durante un período de retiro por medicación. Llegará con el \""," + \"seguimiento de medicación — todavía nada establece restricciones, así que por ahora gestione los \""," + \"períodos de retiro fuera de Cluckwork.\","," glossaryProductTerm: \"Producto\","," \"Lo que usted vende — un producto de huevo apunta a un grado (su fuente de existencias) y lleva una \""," + \"unidad de venta y un precio predeterminado.\","," glossaryPackedUnitTerm: \"Unidad empacada\","," \"Cuántos huevos contiene una docena/bandeja/cartón/caja en su granja. Cada línea de venta conserva \""," + \"el conteo con el que se vendió.\","," glossarySalesLineTerm: \"Línea de venta\","," \"Un producto en un pedido: cantidad en unidades de venta, con precio por unidad; los huevos detrás \""," + \"de ella son la cantidad × el conteo de huevos de la unidad.\","," glossaryConfirmOrderTerm: \"Confirmar (pedido)\","," \"Convierte un pedido en borrador en una venta real y asigna existencias. Solo se deshace anulando.\","," glossaryVoidOrderTerm: \"Anular (pedido)\","," \"Deshacer una confirmación equivocada — las existencias regresan exactamente a los lotes de donde \""," + \"vinieron. Requiere un motivo.\","," glossaryCancelOrderTerm: \"Cancelar (pedido)\","," glossaryCancelOrderDef: \"Cerrar un borrador que nunca se concretó. No involucra existencias.\","," glossaryInventoryItemTerm: \"Artículo de inventario\","," \"Una entrada del catálogo para algo que usted almacena (alimento, suplementos…), con una unidad de \""," + \"medida fija.\","," glossaryInventoryLotTerm: \"Lote de inventario\","," \"Un lote recibido de un artículo, con su propio costo. Existencia disponible = suma de los lotes.\","," glossaryInventoryMovementLedgerTerm: \"Libro mayor de movimientos de inventario\","," \"El rastro de solo adición de cada cambio en las existencias de alimento/suministros. Las \""," + \"correcciones son filas nuevas, nunca ediciones.\","," glossaryWaterUsageTerm: \"Uso de agua\","," \"Lo que bebió un lote en un día — cantidad directa o delta de medidor. Editable en el lugar; \""," + \"lote/fecha fijos.\","," glossaryFeedUsageTerm: \"Uso de alimento\","," \"Lo que comió un lote en un día; consume lotes en orden FIFO y estima el costo a partir de ellos.\","," glossaryAdjustmentDiscardTerm: \"Ajuste / Descarte\","," \"Correcciones de existencias contra un lote, motivo requerido. Descarte = baja (deterioro).\","," glossaryRolesTerm: \"Roles\","," \"Admin (propietario), Gerente, Trabajador, Ventas, Solo lectura — vea \\\"Quién puede hacer qué\\\". Los \""," + \"trabajadores registran; los gerentes también corrigen y configuran; ventas gestiona pedidos y \""," + \"pagos; solo lectura únicamente visualiza.\","," glossaryLockedEntryTerm: \"Bloqueada (entrada)\","," \"Una entrada enviada de más de 7 días — cerrada a ediciones rutinarias; el ajuste/anulación de admin \""," + \"sigue funcionando.\","," glossaryAdjustEntryTerm: \"Ajustar (entrada)\","," \"Corrección de admin sobre una entrada enviada. Las existencias y el libro mayor de aves se \""," + \"concilian automáticamente; los huevos vendidos son intocables; los valores anteriores permanecen \""," + \"visibles.\","," glossaryVoidEntryTerm: \"Anular (entrada)\","," \"Deshacer de admin de toda una entrada enviada — los lotes quedan vacíos, las muertes se revierten, \""," + \"la entrada se conserva como Anulada. Se rechaza una vez que sus huevos están vendidos.\","," glossaryFarmSettingsTerm: \"Configuración de la granja\","," \"El nombre de la granja, la zona horaria, la configuración regional, la moneda y el sistema de \""," + \"unidades, además del primer día de la semana y los formatos de fecha/hora, opcionales. \""," + \"Configuración → Configuración de la granja; propietarios y gerentes editan, todos pueden leer — \""," + \"dar formato a montos y fechas no es un permiso.\","," glossaryCurrencyLockTerm: \"Bloqueo de moneda\","," \"La moneda de la granja deja de ser editable en cuanto algo registra un monto en ella — una venta, \""," + \"un pago, un gasto, un producto con precio, dinero gastado en alimento. El campo se muestra \""," + \"bloqueado con el motivo. Nada de lo ya registrado se vuelve a valorar jamás, que es todo el punto.\","," glossaryFarmLogoTerm: \"Logotipo de la granja\","," \"Su propia imagen en lugar de la marca de Cluckwork en la barra lateral, subida desde Configuración \""," + \"de la granja. PNG, JPEG o WebP (2 MB por defecto), solo imágenes fijas; una marca cuadrada y \""," + \"simple se lee mejor en el tamaño pequeño de la barra lateral. Se guarda como una copia \""," + \"reconstruida sin los detalles de cámara y ubicación.\","," glossaryFarmPaletteTerm: \"Paleta de la granja\","," \"El color de acento de toda la granja, elegido por un admin en Configuración de la granja. \""," + \"Independiente de la configuración de modo claro/nocturno de cada persona.\","," glossaryUiLanguageTerm: \"Idioma de la interfaz\","," \"El idioma por usuario en que se muestra la interfaz — inglés, español o tagalo — elegido desde \""," + \"Cuenta → Preferencias. El inglés es el idioma de reserva para cualquier pantalla aún no \""," + \"traducida, sea cual sea el idioma que eligió.\","," \"Las definiciones completas en lenguaje de especificación viven en \""," + \"specs/product/GLOSSARY.md del repositorio.\",","web/src/i18n/en.ts",[4340],{"_787":788,"_789":4341,"_410":4342,"_792":62},2500,[4343,4344,4345,4346,4347,1015,4348,4349,4350,4351,4352,4353,4354,4355,4356,4357,4358,1025,4359,4360,4361,4362,4363,4364,4365,4366,4367,2931,1036,1037,1038,1039,1040,4368,4369,4370,1044,4371,4372,4373,4374,4375,1036,1049,4376,4377,4378,202,4379,4380,1059,4381,4382,4383,4384,4385,4386,4387,4388,1062,4389,4390,4391,4392,4393,4394,4395,4396,4397,4398,4399,4400,4401,4402,1036,4403,4404,4405,1072,4406,1036,4407,4408,4409,4410,4411,4412,4413,1082,1083,1084,4414,4415,1087,1088,4416,4417,202,1091,1092,4418,4419,4420,4421,1097,4422,4423,1100,4424,4425,4426,4427,4428,4429,1107,1108,1109,4430,4431,4432,4433,4434,202,1113,4435,4436,4437,1117,4438,1120,4439,4440,4441,4442,4443,1124,202,1125,4444,4445,1128,4446,1036,4447,4448,4449,4450,4451,1132,4452,4453,4454,4455,4456,1036,1136,4457,1138,4458,1143,4459,4460,4461,4462,1036,4463,4464,4465,4466,4467,1151,4468,4469,1154,1155,1036,1158,4470,4471,1036,4472,4473,4474,1163,4475,4460,4476,4477,1036,4478,1167,1168,4479,4355,4480,4481,202,1172,4482,4483,4484,4485,4486,4487,4488,4489,4490,1182,4491,4492,4493,4494,4495,4496,4497,4498,4499,202,1190,4500,4501,4502,4503,4504,4505,4506,4507,4508,4509,4510,202,1202,4511,4512,4513,4514,1207,4515,3061,202,1210,4516,4517,202,4518,4519,4520,4521,4522,202,1215,4523,4524,1222,1223,4525,1225,202,1226,1227,4526,1229,4527,4528,4529,202,1233,4530,4531,4532,4533,3084,4534,4535,1241,4536,202,1243,4537,4538,4539,4540,4541,4542,4543,4544,202,1252,4545,1254,4546,4547,4548,4549,4550,4551,4552,4553,4554,4555,4556,202,1266,4557,4558,4559,4560,4561,1036,4562,4563,4564,4565,4566,4567,1279,4568,202,4569,4570,4571,1283,4572,202,4573,4574,202,1288,4575,4576,4577,4578,4579,202,4580,4581,4582,4583,4584,4585,4586,202,4587,4588,4589,1302,4590,4591,1306,4592,4593,202,4594,4595,4596,4597,4598,202,4599,4600,4601,4602,4603,4604,4605,4606,202,1320,1321,4607,4608,1325,4609,202,4610,4611,1329,4612,4613,4614,4615,202,1334,4616,4617,4618,4619,4620,4621,4622,4623,202,1343,4624,4625,4626,4627,202,1348,4628,1350,4629,4630,4631,202,1354,4632,4633,1036,4634,4635,4636,4637,4638,4639,4640,4641,4642,4643,4644,4645,1362,1363,202,4646,4647,4648,4649,4650,4651,202,1366,4652,4653,4654,202,1370,4655,4656,4657,4658,4659,4660,4661,4662,4663,202,1379,1380,4664,4665,1383,1384,4666,202,1386,4667,4668,4669,1390,3193,1036,4670,4671,4672,4673,4674,4675,4676,4677,4678,4679,4680,1397,4681,202,4569,4570,4682,4683,4684,1402,4685,202,1405,4686,4687,4688,202,1409,4575,4577,4578,4689,4690,4691,4692,4693,4694,4695,4696,4697,202,1417,4698,4699,4700,202,1243,4701,4702,202,1354,4703,4704,202,1425,4705,4706,4707,4708,202,1430,4709,4657,4710,4711,4712,4713,4714,4715,1036,4716,4717,4672,4718,4719,4720,4721,4722,4723,4724,3323,1446,4725,4726,4727,4728,4729,4730,4731,202,4646,4732,4733,202,1405,4734,4735,4736,202,4737,4738,4739,4740,4741,4742,4743,4744,4745,4746,4747,4748,202,4749,4750,4751,1464,4752,4753,4754,4755,4756,202,4757,4758,4759,4760,1470,4761,4658,202,4762,4763,4764,1036,4765,4766,4563,4767,4768,4769,4770,4771,4772,4773,4774,4775,4776,4777,4778,4779,4780,4781,4782,4783,4784,4785,1486,4786,1405,4787,4788,202,4569,4570,4789,4790,4791,4792,4701,4793,4794,4795,4796,4797,202,1504,4798,4799,4800,4801,4802,4803,4804,4805,4806,4807,202,1515,4808,4809,4810,4811,4812,4813,4814,4815,1520,4816,4817,4818,4819,4820,202,1526,4821,4822,4823,4824,4696,4825,4826,4827,4828,4829,1534,4697,4830,202,1536,4831,4575,4832,4578,4833,202,4834,4835,4836,4837,4838,4751,4839,4840,4841,4842,4470,4843,202,1548,4844,4845,4846,4847,4848,4849,202,1555,4759,4850,4851,4852,4658,4853,4746,4747,4748,1036,4854,4855,4856,4672,4857,4858,4859,4860,4861,4862,4863,4864,4865,1568,4866,202,4867,4868,4570,4869,4870,4538,4539,202,1405,4871,4872,4873,202,4874,4875,4876,4740,4877,4878,4879,202,4880,4881,4582,4882,4883,4884,4885,4886,4887,4888,4889,4890,4891,4892,4893,202,4894,4895,4896,4897,4898,4899,4900,4901,4902,4903,4904,4905,202,4906,4907,4908,4909,4759,4665,4910,4911,4912,4913,4658,4914,4915,4746,4747,4748,202,1598,4916,1600,4917,4918,4919,4920,4921,4922,4923,1036,4924,4925,4926,4927,4928,4929,4930,4931,4932,4933,4934,4935,4936,1617,1618,202,4937,4570,4938,4939,4940,202,4664,202,1622,4665,4941,4942,4943,1383,1384,4944,4945,4946,4947,1625,4948,4949,202,1628,4950,4951,4952,4953,1633,4954,202,4955,4956,4957,4958,1637,4959,4960,4961,4845,4962,4963,1036,4964,4965,4966,4967,4672,4968,4969,4769,4970,4971,4972,4973,4974,4975,4976,4977,4978,4979,4980,1653,4981,202,4982,4570,4682,4983,202,4984,1405,4985,4986,202,4580,4581,4750,4987,4584,4988,4989,4990,4585,4991,202,4992,4993,4994,4995,4996,4997,202,4998,4999,5000,202,5001,202,5002,5003,4908,4759,5004,5005,5006,5007,4658,5008,5009,5010,202,5011,5012,5013,5014,4746,5015,5016,5017,5018,5019,202,5020,5021,5022,1685,5023,5024,5025,1690,5026,5027,202,5028,5029,5030,1696,5031,5032,5033,202,5034,5035,5036,5037,4578,4751,4697,5038,202,5039,202,5040,5041,5042,4844,4845,5043,4847,1036,5044,5045,4563,5046,5047,1081,5048,5049,5050,5051,5052,5053,5054,5048,5055,5056,5057,5058,5059,5060,5061,5062,1715,5063,1405,5064,5065,5066,202,1720,1721,5067,5068,5069,5070,5071,5072,5073,5074,5075,1729,5076,5077,5078,5079,5080,1733,5081,5082,5083,5084,5085,5086,5087,5088,5089,5090,5091,1744,5092,5093,5094,202,1748,1749,5095,5096,1752,5097,5098,1756,1757,5099,1758,5100,5101,5102,5103,5104,5105,5106,5107,5108,5109,1767,5110,5111,5112,5113,5114,5115,1772,1773,5116,5117,5118,5119,1778,5120,5121,5122,5123,5124,202,5125,4732,1785,5126,5127,1788,5128,5129,1791,5130,5131,1036,5132,5133,4563,5046,5134,5135,5048,5136,5137,5138,5139,5140,5141,5142,5143,5144,1799,5145,5146,1802,5147,5148,5149,5150,5151,202,1809,1810,5152,5153,5154,5155,5156,5157,5158,202,5159,5160,5161,5162,5163,5164,202,1820,1821,5165,5166,4746,1824,5167,202,5168,5169,5170,1828,5171,5172,5173,5174,5175,5176,202,5177,5178,5179,202,5180,5181,1841,5182,5183,5184,5185,5186,202,5125,5187,5188,5189,5190,5191,5192,5193,1036,5194,5195,5196,4563,5046,5197,4467,5048,5198,5199,5200,5201,5202,5203,5204,5205,5206,5207,5048,5208,5209,5210,5211,5212,1855,5213,202,5125,4732,5214,5215,5216,5217,1859,5218,5219,5220,5221,5222,5223,202,5224,5225,5226,4537,4538,4539,4540,202,1866,5227,5228,5229,4803,5230,5231,5232,5233,5234,5235,202,1872,5236,5237,5238,5239,5240,5241,5242,5243,4747,5017,5244,202,1880,5245,5246,5247,5248,5249,5250,5251,5252,5253,5254,5255,5256,202,5257,5258,5259,5260,4699,202,1893,5261,4709,4850,5262,4710,4657,4713,4714,4715,1036,5263,5264,5265,4672,5266,5267,5268,5048,5269,5270,5271,5272,5273,5274,5275,5276,1899,5277,5278,202,1902,5279,5280,1905,1906,5281,5282,202,5283,4570,5284,5285,202,1911,5286,4759,5287,1914,1915,4713,5288,1036,5289,5290,5291,4563,5046,5292,5293,5048,5294,5295,5296,5297,5298,5299,5300,5301,5302,5303,5304,5048,5305,5306,5307,5308,5309,5048,5310,5311,5312,5313,5314,5315,5316,5317,1926,5318,5319,5320,5321,5322,5323,202,1405,5324,5325,5326,202,4569,5327,5328,5329,5330,5331,5332,1933,5333,5334,5335,1859,5336,5337,5338,5339,5340,1939,5341,5342,1942,5343,5344,5345,5346,5347,5348,1947,5349,5350,5351,5352,5353,5354,1955,5341,5355,5356,202,1866,4575,5357,4706,4707,202,5358,5359,5360,5361,5362,5363,1962,5364,4602,4603,4604,4605,5365,5366,5367,5368,5369,5370,4470,5371,202,5372,202,1971,4709,4657,4658,3193,5373,4661,5374,5375,5376,4746,5377,5378,4715,202,5379,5380,5381,5382,5383,5384,5385,5386,1987,1036,5387,5388,5389,5390,5391,5048,5392,5393,5394,5395,5396,5397,5398,5399,5400,5401,5402,1996,5403,4706,4707,202,5404,4709,4659,5373,5405,5406,2001,2002,5407,5408,202,5409,5410,5411,5412,2007,5413,5414,5415,5416,5417,5418,5419,3645,5420,5421,5422,5423,5424,5425,5426,2015,5427,5428,1036,5429,5430,5431,5432,5433,5434,5435,5436,5437,5438,2026,5439,1405,5440,5441,5442,5443,5444,5445,5446,5447,5448,5449,5450,4715,1036,5451,5452,5453,5454,5455,5456,5457,5458,5459,5460,2044,2045,1405,5461,5462,5463,202,5464,5465,5466,5467,5468,5469,5470,202,5471,202,5472,5473,5474,5475,5476,5477,5478,5479,5480,5481,5482,5483,5484,5485,5486,5487,5488,5489,5490,5491,5492,5493,5494,5495,5496,5497,5498,5499,5500,1036,5501,5502,5503,5504,5505,5506,5507,5048,5508,5509,5510,5511,5512,5513,5514,5515,5516,5517,5518,5519,5520,5521,5522,5523,5524,2090,5525,5526,5527,5528,2094,5529,5530,5531,5532,5533,5534,5535,5536,5537,5538,202,5539,5540,5541,5542,5543,2107,2108,5544,2110,202,5545,5546,3716,5547,5548,202,5549,5550,2117,2118,202,5551,5552,5553,2122,202,5554,5555,2124,5556,5557,5558,5559,2129,5560,5561,5562,5563,202,5564,5565,5566,5567,5568,5569,5570,202,5571,5572,5573,5574,5575,5576,202,5577,5578,5579,5580,5581,5582,5583,5584,2150,5585,202,5586,5587,3747,202,5588,5589,5590,5591,5592,5593,5594,5595,202,5596,5597,5598,5599,5600,5601,5602,5603,5604,5605,5606,5607,5608,5609,5610,5611,5612,5613,5614,5615,5616,5617,5618,5619,5620,5621,5622,5623,5624,5625,5626,5627,5628,5629,5630,5631,5632,202,5633,2204,5634,5635,5636,5637,5638,5639,5640,5641,5642,5643,5644,2216,5645,1036,202,5646,5647,5648,5649,5650,5651,5652,2233,5653,5654,5655,5656,5657,202,5658,5659,5660,5661,5662,5663,5664,5665,5666,5667,5668,5669,5670,5671,2248,5672,5673,5674,5675,5676,2254,5677,5678,5679,5680,5681,5682,2261,202,5683,5684,2263,5685,2265,5686,5687,5688,2270,5689,5690,5691,5692,202,5693,5694,2277,5695,5696,2280,5697,5698,5699,5700,2286,5701,5702,5703,2291,5704,5705,5706,5707,5708,5709,2297,5710,5711,5712,5713,2303,5714,5715,5716,5717,5718,5719,202,5720,5721,2312,5722,5723,5724,5725,5726,5727,202,5728,5729,2322,5730,5731,5732,5733,2329,5734,5735,5736,2334,5737,5738,5739,2338,5740,5741,5742,5743,5744,5745,2347,5746,5747,5748,5749,5750,202,5751,5752,2355,5753,5754,5755,5756,2360,5757,5758,5759,5760,2366,5761,5762,5763,5764,2372,5765,5766,5767,2376,5768,5769,5770,2381,5771,5772,5773,5774,5775,5776,2389,5777,5778,5779,5780,202,5781,5782,2396,5783,5784,5785,5786,2401,5787,5788,5789,2405,5790,5791,5792,5793,2410,5794,5795,2414,5796,5797,2418,5798,5799,5800,2423,5801,5802,2427,5803,5804,5805,5806,5807,5808,2436,5809,5810,5811,5812,2442,5813,202,5814,5815,2446,5816,5817,5818,5819,2451,5820,5821,5822,2456,5823,5824,202,5825,5826,2460,5827,5828,5829,2464,5830,5831,5832,5833,5834,202,5835,5836,2472,5837,5838,5839,2477,5840,5841,202,5842,2481,2482,5843,5844,5845,2487,5846,5847,5848,5849,5850,202,5851,5852,2495,5853,5854,2499,5855,5856,5857,2504,5858,5859,2507,5860,5861,5862,2511,5863,5864,202,5865,5866,2515,5867,5868,2518,5869,5870,5871,2523,5872,5873,202,5874,5875,2527,5876,5877,5878,5879,2534,5880,5881,2537,5882,5883,5884,5885,2543,5886,5887,5888,5889,5890,5891,202,5892,5893,2552,5894,5895,5896,2556,5897,5898,5899,202,5900,5901,2561,5902,5903,5904,2566,5905,5906,5907,2570,5908,5909,202,5910,2573,2574,5911,5912,5913,2578,5914,5915,5916,2582,5917,5918,202,5919,5920,2587,5921,5922,5923,5924,202,5925,5926,2593,5927,5928,5929,5930,2599,5931,5932,202,5933,5934,2603,5935,5936,5937,5938,5939,5940,2611,5941,5942,5943,5944,5945,5946,2619,5947,5948,5949,5950,2624,5951,5952,5953,5954,5955,2631,5956,5957,5958,5959,202,5960,5961,2638,5962,5963,5964,2642,5965,5966,5967,202,5968,5969,2647,5970,5971,5972,5973,2652,5974,5975,5976,2656,5977,5978,5979,2660,5980,5981,5982,2665,5983,5984,5985,5986,202,5987,5988,2671,5989,5990,5991,5992,5993,202,5994,5995,202,5996,5997,202,5998,2683,5999,6000,202,6001,2687,6002,6003,202,6004,2691,6005,6006,6007,202,6008,2696,6009,6010,6011,202,6012,2702,6013,6014,202,6015,2707,6016,6017,6018,6019,202,6020,2713,6021,6022,6023,6024,202,6025,2719,6026,6027,6028,6029,202,6030,6031,6032,6033,6034,6035,6036,6037,6038,6039,6040,6041,2735,202,2736,2737,6042,6043,202,6044,2741,6045,6046,6047,6048,6049,6050,202,6051,2751,6052,6053,6054,6055,202,6056,2758,6057,6058,6059,6060,202,6061,2764,6062,6063,6064,202,6065,6066,2770,6067,6068,6069,6070,202,6071,2776,6072,6073,6074,202,6075,6076,202,6077,2783,6078,6079,202,6080,6081,202,6082,2789,6083,6084,202,2792,6085,202,2796,6086,202,2798,6087,202,2802,6088,202,2806,6089,202,2808,2809,6090,6091,202,6092,2814,6093,6094,202,2817,2818,6095,4920,202,6096,2822,6097,6098,202,6099,6100,202,6101,2830,6102,202,6103,6104,202,6105,2836,6106,202,6107,6108,202,6109,2843,6110,202,6111,2847,6112,202,6113,6114,202,2854,2855,6115,202,4301,2858,6116,6117,202,6118,2863,6119,202,6120,2867,6121,6122,202,6123,2871,6124,6125,202,6126,2875,6127,6128,6129,202,2879,2880,6130,6131,6132,202,6133,2886,6134,6135,6136,202,6137,2892,6138,6139,202,6140,2896,6141,6142,6143,202,2900,6144,1036,2903,202,6145],"// The English catalog — the SOURCE OF TRUTH and the fallback (#182). Namespaced","// by area. Keys are camelCase; values are sentence-case UI copy. Adding a key","// here extends the compile-time key type (see types/i18next.d.ts), so a t(\"typo\")","// is a build error.","export const en = {"," cancel: \"Cancel\","," save: \"Save\","," close: \"Close\","," delete: \"Delete\","," edit: \"Edit\","," add: \"Add\","," confirm: \"Confirm\","," loading: \"Loading…\","," working: \"Working…\","," // The Help page's one line on busy buttons (#236) — kept beside `working`,"," // the announcement it explains."," \"A spinning button means the save is still working — pressing it again will not record the same thing twice.\","," retry: \"retry\","," required: \"Required\","," optional: \"Optional\","," actions: \"Actions\","," search: \"Search\","," all: \"All\","," none: \"None\","," yes: \"Yes\","," signIn: \"Sign in\","," signingIn: \"Signing in…\","," invalidCredentials: \"Invalid email or password.\","," \"Too many sign-in attempts. Please wait a few minutes and try again.\","," apiDown: \"Could not sign in. Is the API running?\","," // #309 — the request body exceeded the server's byte cap (413), which in"," // practice means an implausibly long email/password."," credentialsTooLong: \"That's too long — check your email and password.\","," preferences: \"Preferences\","," language: \"Language\","," languageHint: \"The language the interface is shown in, just for you.\","," // Task 25 (#182, B4) — the rest of AccountPage: the page heading, the"," // role line, and the self-service change-password surface (#165)."," // {{role}} is the signed-in account's own role, passed through"," // enums.ts's roleLabel() by the component (Task 22 convention: role"," // display always goes through roleLabel(), e.g. \"ReadOnly\" ->"," // \"Read-only\") — so this stays a plain string placeholder here, not raw"," // union data. is the only JSX interleaved in this screen's"," // prose, hence the one use."," roleLine: \"You are signed in with the {{role}} role.\","," changePasswordHeading: \"Change password\","," \"Changing your password signs you out everywhere else — this device \""," + \"stays signed in.\","," // The trailing \" \" is folded into the label text itself, matching how"," // UsersPage's emailFieldLabel/newPasswordFieldLabel already handle a"," // required-field marker — never a standalone \"\" key."," currentPasswordLabel: \"Current password \","," // {{min}} is MIN_LENGTH (AccountPage.tsx) — interpolated, not baked in,"," // so the label and the validation message below can never drift apart."," newPasswordLabel: \"New password (min {{min}} chars) \","," confirmPasswordLabel: \"Confirm new password \","," changePasswordButton: \"Change password\","," passwordMismatchError: \"The new passwords don't match.\","," passwordTooShortError: \"The new password must be at least {{min}} characters.\","," passwordChangedMessage: \"Password changed. Any other devices have been signed out.\","," // Keyed by the API's stable validation codes (#45), which contain dots"," // (e.g. \"Me.Language.Format\"). With keySeparator:false (see init) these are"," // literal flat keys, not nested paths. Filled in Task 4."," \"Me.Language.Format\": \"Language must be a 2–8 letter code, for example 'en'.\","," // Shared navigation chrome (Task 7, #182) — the FIRST screen-externalization"," // batch (B1). `nav` is in TRANSLATED_NAMESPACES — es/tl are machine-drafted"," // (#182), pending native review. `navGroups()`/`tabEntries()`"," // (routes/nav.tsx) are PURE FUNCTIONS and cannot call useTranslation, so they"," // carry a typed `labelKey` into this namespace instead of English text; the"," // render sites (AppLayout, BottomNav) translate it. The same labelKeys feed"," // the sidebar, the bottom tab bar, and the More sheet — one source."," groupProduction: \"Production\","," groupSalesStock: \"Sales & stock\","," groupYou: \"You\","," groupHelp: \"Help\","," dailyEntry: \"Daily entry\","," flocks: \"Flocks\","," water: \"Water\","," inventory: \"Inventory\","," customers: \"Customers\","," sales: \"Sales\","," reports: \"Reports\","," expenses: \"Expenses\","," farmSettings: \"Farm settings\","," grades: \"Grades\","," products: \"Products\","," users: \"Users\","," // Distinct from `groupHelp` above: this is the \"Help\" DESTINATION's own"," // labelKey, just like every other entry pairs with its group's `group`"," // heading key (e.g. `groupSetup`/farmSettings). The rendered text happens"," // to coincide with the group heading, but the two keys are independent."," help: \"Help\","," skipToContent: \"Skip to main content\","," primaryNavAriaLabel: \"Primary\","," signOut: \"Sign out\","," \"Could not load this farm's settings, so dates follow this device rather than the farm.\","," \"Could not re-read this farm's settings, so what you see here may be out of date.\","," tryAgain: \"Try again\","," // Composed with the per-page title (the active nav entry's translated"," // label) to build document.title, e.g. \"Dashboard — Cluckwork\". The brand"," // word stays as-is, matching FarmBrand's own hardcoded \"Cluckwork\" fallback."," tabBarAriaLabel: \"Sections\","," moreButton: \"More\","," allSectionsAriaLabel: \"All sections\","," // Shared primitives (Task 8, #182, batch B1) — Dialog's close button reuses"," // `common.close` (no new key needed); these two components have genuinely"," // new copy of their own. Both namespaces are in TRANSLATED_NAMESPACES — es/tl"," // are machine-drafted (#182), pending native review, same treatment as"," // `nav` above."," // Interpolated with the caller-supplied field name (e.g. \"total eggs\"),"," // which is domain text passed in via NumberField's `label` prop, not"," // translated here."," increaseLabel: \"Increase {{label}}\","," decreaseLabel: \"Decrease {{label}}\","," title: \"Something went wrong\","," \"This screen ran into a problem and couldn’t finish loading. Anything you’d already saved is safe, but anything you were still typing here may need to be entered again. The rest of the app still works.\","," \"The app ran into a problem and couldn’t finish loading. Reloading usually clears it.\","," reload: \"Reload\","," backToDashboard: \"Back to the dashboard\","," detailsSummary: \"Error details\","," // The last three shared components (Task 9, #182, batch B1). Cancel reuses"," // common.cancel (see useConfirm below) rather than duplicating it here."," // Both namespaces are in TRANSLATED_NAMESPACES, same treatment as"," // `nav`/`numberField`/`errorBoundary` above: es/tl are machine-drafted"," // (#182), pending native review."," switchToLightMode: \"Switch to light mode\","," switchToNightMode: \"Switch to night mode\","," reasonLabel: \"Reason \","," reasonRequired: \"A reason is required.\","," // The service-worker \"update ready\" banner (UpdatePrompt.tsx, src/pwa) — named"," // for the directory rather than the component, since it's the one place PWA"," // chrome lives today."," updateAvailable: \"A new version of Cluckwork is ready.\","," reloading: \"Reloading…\","," later: \"Later\","," // Sales pilot (Task 7, #182) — the worked pattern for the full sweep."," title: \"Sales\","," payments: \"Payments\","," ordersHeading: \"Orders\","," newOrder: \"New order\","," newDraftOrder: \"New draft order\","," save: \"save\","," cancelEdit: \"cancel\","," edit: \"edit\","," remove: \"remove\","," addLine: \"Add line\","," confirmOrderButton: \"Confirm order (allocates stock)\","," cancelDraft: \"Cancel draft\","," // common.close (\"Close\") — matches this page's lowercase link-styled"," // buttons (edit/remove/open/load more, above/below). Not a dup: same"," // meaning, different case, so it stays here rather than merging (#182)."," close: \"close\","," voidPaymentButton: \"void\","," recordPayment: \"Record payment\","," voidOrderButton: \"Void order (returns stock)\","," open: \"open\","," loadMore: \"load more\","," customer: \"Customer\","," date: \"Date\","," product: \"Product\","," perLabel: \"Per\","," quantity: \"Quantity\","," unitPriceWithCurrency: \"Unit price ({{code}})\","," method: \"Method\","," referenceOptional: \"Reference (optional)\","," noteOptional: \"Note (optional)\","," amountWithCurrency: \"Amount ({{code}})\","," status: \"Status\","," qty: \"Qty\","," eggs: \"Eggs\","," unitPrice: \"Unit price\","," lineTotal: \"Line total\","," amount: \"Amount\","," editQuantityAriaLabel: \"Edit quantity\","," editUnitPriceAriaLabel: \"Edit unit price\","," // Status-filter options. The Draft/Confirmed/Cancelled/Voided labels are"," // rendered from the shared `enums:status` family via statusLabel() (#182) —"," // no local duplicate here. `allOption` is filter-only chrome (\"no status"," // filter\"), which has no enums equivalent, so it stays in this namespace."," allOption: \"All\","," unitEgg: \"Egg\","," unitDozen: \"Dozen\","," unitCarton: \"Carton\","," methodCheck: \"Check\","," methodBankTransfer: \"BankTransfer\","," methodMobilePayment: \"MobilePayment\","," methodOther: \"Other\","," addCustomerFirst: \"Add a customer first (Customers page), then create an order.\","," noOrdersMatch: \"No orders match.\","," voidingNeedsAdmin: \"Voiding needs an admin.\","," voidReasonLabel: \"Void reason: {{reason}}\","," perUnit: \"per {{unit}}\","," eggsCount: \"({{count}} eggs)\","," paymentsSummary: \"Paid {{paid}} — outstanding {{outstanding}}\","," enterValidAmount: \"Enter a valid amount.\","," noDecimalPlaces: \"This currency has no decimal places.\","," atMostDecimals: \"At most {{count}} decimal places for this currency.\","," enterAmountGreaterThanZero: \"Enter an amount greater than zero.\","," invalidUnitPrice: \"Invalid unit price.\","," loadSalesDataFailed: \"Could not load sales data. Is the API up?\","," loadOrdersFailed: \"Could not load orders.\","," loadPaymentsFailed: \"Could not load this order's payments.\","," confirmOrderTitle: \"Confirm this order?\","," \"Stock is allocated from inventory, oldest lots first (FIFO). \" +"," \"A mistaken confirm can be undone with Void, which returns the stock.\","," confirmOrderConfirmLabel: \"Confirm order\","," cancelDraftTitle: \"Cancel this draft?\","," cancelDraftBody: \"The order becomes cancelled and can no longer be edited or confirmed.\","," voidPaymentTitle: \"Void this payment?\","," voidPaymentBody: \"The order's outstanding amount grows back by the payment's value.\","," voidPaymentConfirmLabel: \"Void payment\","," voidOrderTitle: \"Void this confirmed order?\","," voidOrderBody: \"The allocated stock returns to the exact egg lots it came from.\","," voidOrderConfirmLabel: \"Void order\","," orderConfirmed: \"Order {{ref}} confirmed — stock allocated (FIFO).\","," draftOrderCancelled: \"Draft order cancelled.\","," paymentRecorded: \"Payment recorded.\","," paymentVoided: \"Payment voided — the outstanding amount grew back.\","," orderVoided: \"Order {{ref}} voided — stock returned to inventory.\","," // Daily entry capture screen (Task 11, #182, batch B2). `dailyEntry` is in"," // TRANSLATED_NAMESPACES, same treatment as nav/numberField/errorBoundary/"," // themeToggle/useConfirm/pwa above: es/tl are machine-drafted (#182),"," // pending native review. The one closed-vocabulary display on this screen"," // (the entry-locked banner's status word) goes through the `enums`"," // `statusLabel` helper, not a key here — see DailyEntryPage.tsx."," title: \"Daily entry\","," // Imperative messages (event handlers / promise callbacks — see"," // CONTRIBUTING-i18n.md's imperative i18n.t() pattern)."," loadFlocksGradesFailed: \"Could not load flocks/grades. Is the API up?\","," \"This edit link points at a flock or date that is no longer available — using the usual defaults instead.\","," // \"Editing draft\" badge — a bespoke StatusBadge label, not an enum display."," editingDraftBadge: \"Editing draft\","," flockLabel: \"Flock\","," noFlocksYetOption: \"— no flocks yet —\","," depletedFlockSuffix: \" — depleted, backfill only\","," dateLabel: \"Date\","," newFlockButton: \"+ new flock\","," // New-flock dialog (F131)"," newFlockDialogTitle: \"New flock\","," nameLabel: \"Name\","," breedLabel: \"Breed\","," placedLabel: \"Placed\","," birdsLabel: \"Birds\","," createFlockButton: \"Create flock\","," // Locked-day / prefill-failure banners. `status` is interpolated with the"," // ALREADY-LABELLED (statusLabel), lowercased value — never the raw wire"," // status."," \"This day is already {{status}} — its egg lots exist. \""," + \"Corrections are made from History (admins: adjust or void).\","," \"Could not check whether this day already has an entry — saving is \""," + \"blocked so existing data isn't overwritten.\","," // Step headings (F134's two-step layout)"," stepLabel: \"Step {{n}}\","," stepOfTotal: \"of 2:\","," eggCountsHeading: \"Egg counts\","," gradingHeading: \"Grading\","," // Count field labels — reused lowercased (see g.name.toLowerCase() for"," // grades, same pattern) as NumberField's aria-label `label` prop, so there"," // is no separate lowercase key to keep in sync."," totalEggsLabel: \"Total eggs\","," crackedLabel: \"Cracked\","," dirtyLabel: \"Dirty\","," discardedLabel: \"Discarded\","," mortalityLabel: \"Mortality\","," \"Cracked + dirty + discarded ({{losses}}) exceed total eggs ({{total}}).\","," sellableLabel: \"Sellable\","," deactivatedGradeSuffix: \" (deactivated)\","," // F134 remainder-assignment gesture (grading pane)"," takeRemainderAriaLabel: \"Put all {{count}} remaining in {{grade}}\","," armAriaLabel: \"Choose a grade for the remaining {{count}}\","," disarmAriaLabel: \"Cancel choosing a grade\","," armButton: \"put all in…\","," disarmButton: \"pick a grade…\","," fixCountsFirst: \"Fix the counts first\","," fixCountsShort: \"fix the counts\","," overSellableCount: \"over the sellable count\","," overShort: \"over\","," gradedDayAddsUp: \"graded — the day adds up\","," allGradedShort: \"all graded\","," leftToGrade: \"left to grade\","," leftShort: \"left\","," countsExceedFooterMessage: \"Losses exceed the total — fix the counts\","," sellableWord: \"sellable\","," saveDraftButton: \"Save draft\","," submitButton: \"Save & submit (creates egg lots)\","," confirmSubmitTitle: \"Submit this day?\","," \"Egg lots are created and the entry can no longer be edited. \""," + \"Corrections after this need a manager adjustment.\","," confirmSubmitLabel: \"Submit day\","," submittedMessage: \"Submitted — {{count}} egg lot(s) created.\","," draftSavedMessage: \"Draft saved.\","," // Landing page — today's per-flock production, stock by grade, and recent"," // sales (Task 12, #182, batch B2). `dashboard` is in TRANSLATED_NAMESPACES,"," // same treatment as nav/numberField/errorBoundary/themeToggle/useConfirm/"," // pwa/dailyEntry above: es/tl are machine-drafted (#182), pending native"," // review. The two status pills on this screen (today's per-flock entry"," // status, and each recent order's status) go through the `enums`"," // `statusLabel` helper, not a key here — see Dashboard.tsx. Wiring the"," // per-flock entry pill is an INTENTIONAL harmonization, not"," // text-preserving: a ManagerAdjusted entry"," // used to render raw (\"ManagerAdjusted\") and now reads \"Adjusted\", matching"," // HistoryPage's own bespoke badge for the same state (see the `enums`"," // header comment below)."," // Imperative message (promise callback — see CONTRIBUTING-i18n.md's"," // imperative i18n.t() pattern): every parallel fetch failed."," loadFailed: \"Could not load dashboard. Is the API up?\","," // Shared across all three panels — each degrades independently on its own"," // failed fetch."," panelLoadError: \"Could not load.\","," statEggsCollectedToday: \"Eggs collected today\","," statEggsAvailable: \"Eggs available\","," statActiveFlocks: \"Active flocks\","," todayPanelTitle: \"Today\","," noFlocksMessage: \"No flocks yet — create one on the Daily entry page.\","," flockHeader: \"Flock\","," statusHeader: \"Status\","," eggsHeader: \"Eggs\","," lossesHeader: \"Losses\","," mortalityHeader: \"Mortality\","," // A flock with no entry yet — a bespoke warn badge, not a StatusBadge."," noEntryBadge: \"no entry\","," noStockMessage: \"No stock yet — record and submit a daily entry.\","," gradeHeader: \"Grade\","," eggsAvailableMessage: \"{{count}} eggs available.\","," salesPanelTitle: \"Recent sales\","," noOrdersMessage: \"No orders yet.\","," refHeader: \"Ref\","," // Water usage capture + correction screen (Task 13, #182, batch B2)."," // `water` is in TRANSLATED_NAMESPACES, same treatment as"," // nav/numberField/errorBoundary/themeToggle/useConfirm/pwa/dailyEntry/"," // dashboard above: es/tl are machine-drafted (#182), pending native"," // review. The two"," // closed-vocabulary displays on this screen — the Source picker + table"," // cell, and the Unit picker + table cell + the quantity label's unit"," // suffix — go through the `enums` `waterSourceLabel`/`waterUnitLabel`"," // helpers, not a key here — see WaterPage.tsx. Both families are"," // identity-labelled in English today, so wiring them changes nothing"," // visible (confirmed in the report)."," title: \"Water\","," loadFlocksFailed: \"Could not load flocks. Is the API up?\","," loadRecordsFailed: \"Could not load water records.\","," loadMoreFailed: \"Could not load more.\","," \"This record was just changed elsewhere — reload the list and retry.\","," \"Record what each flock drank — a direct amount, or meter readings (the \""," + \"amount is the meter delta). Records can be corrected later; flock and \""," + \"date are fixed.\","," sourceLabel: \"Source\","," unitLabel: \"Unit\","," fromMeterReadingsLabel: \"from meter readings\","," meterStartLabel: \"Meter start\","," meterEndLabel: \"Meter end\","," // {{unit}} is the ALREADY-LABELLED (waterUnitLabel) current unit — never"," // the raw wire value."," quantityLabelWithUnit: \"Quantity ({{unit}})\","," noteLabel: \"Note\","," recordWaterButton: \"Record water\","," saveCorrectionButton: \"Save correction\","," cancelEditButton: \"cancel edit\","," quantityMustBePositive: \"Quantity must be a positive number.\","," bothMeterReadingsRequired: \"Both meter readings are required.\","," recordedMessage: \"Water recorded.\","," recordCorrectedMessage: \"Water record corrected.\","," recordsHeading: \"Records\","," fromLabel: \"From\","," toLabel: \"To\","," noRecordsMatch: \"No water records match.\","," dateHeader: \"Date\","," amountHeader: \"Amount\","," sourceHeader: \"Source\","," metersHeader: \"Meters\","," noteHeader: \"Note\","," correctButton: \"correct\","," loadMoreButton: \"load more\","," // Egg grade catalog admin screen (Task 14, #182, batch B2 — the last B2"," // screen). `grades` is in TRANSLATED_NAMESPACES, same treatment as"," // dashboard/water above: es/tl are machine-drafted (#182), pending native"," // review. The one closed-vocabulary display on this screen — the Type"," // picker + table cell —"," // goes through the `enums` `gradeTypeLabel` helper, not a key here — see"," // GradesPage.tsx. Size/Quality/Custom are identity-labelled in English"," // today, so wiring it changes nothing visible (confirmed in the report)."," // Grade NAMES (`g.name`) are free-form farm data, not client copy, and stay"," // Titles. `title` is the loaded heading (\"Egg grades\"); `loadingTitle` is"," // the shorter pre-existing heading the two early-return states (load"," // error / still loading) used before this sweep — a pre-existing"," // inconsistency with the loaded heading, preserved verbatim rather than"," // \"fixed\" as a drive-by (not this task's job)."," title: \"Egg grades\","," loadingTitle: \"Grades\","," // imperative i18n.t() pattern)."," loadGradesFailed: \"Could not load grades. Is the API up?\","," \"Saleable grades appear in daily-entry and order pickers. Deactivating \""," + \"a grade removes it from pickers; existing stock and history are \""," + \"unaffected.\","," // Buttons. `newGradeButton` (the page's action button) and"," // `newGradeDialogTitle` happen to share English text today but are"," // separate keys, one per UI role — same treatment as"," // dailyEntry:newFlockButton/newFlockDialogTitle."," newGradeButton: \"New grade\","," newGradeDialogTitle: \"New grade\","," editGradeDialogTitle: \"Edit grade\","," addGradeButton: \"Add grade\","," // Lowercase link-styled row actions, matching sales:edit/water:correctButton."," editButton: \"edit\","," deactivateButton: \"deactivate\","," activateButton: \"activate\","," // Create-dialog form labels."," nameLabel: \"Name \","," typeLabel: \"Type\","," saleableLabel: \"saleable\","," // Edit-dialog's Name label carries no required marker: the row's save"," // used to be a plain button, so native constraint validation never ran on"," // this field, and the dialog keeps that parity (see GradesPage.test.tsx)."," editNameLabel: \"Name\","," // Table headers — separate keys from the form labels above even where the"," // English text coincides (same treatment as water:flockLabel/flockHeader)."," nameHeader: \"Name\","," typeHeader: \"Type\","," saleableHeader: \"Saleable\","," // Saleable column's \"yes\" badge — lowercase, distinct from common.yes"," // (\"Yes\"); same case-sensitive-variant treatment as sales:close."," saleableYesBadge: \"yes\","," // Feed & inventory catalog + receiving/usage/correction screen (Task 16,"," // #182, batch B3 — the biggest B3 screen). `inventory` is in"," // themeToggle/useConfirm/pwa/dailyEntry/dashboard/water/grades above: es/tl"," // are machine-drafted (#182), pending native review. Two closed-vocabulary"," // displays go through `enums` helpers rather than a key here — see"," // InventoryPage.tsx:"," // 1. Category — the New/edit item picker option AND the items-table"," // Category cell both use `inventoryCategoryLabel`; the \"not feedable\""," // message also interpolates the labelled category, never the raw"," // wire value."," // 2. The movement LEDGER's Type cell uses `inventoryMovementLabel` (the"," // raw wire value, identity-labelled in English). The Correct-stock"," // dialog's Type PICKER is deliberately NOT wired to that helper: its"," // two options show decorated screen copy (\"Adjustment (±)\", \"Discard"," // (write-off)\") that isn't the ledger's identity label, so it stays a"," // plain `inventory` key (adjustTypeAdjustmentOption/"," // adjustTypeDiscardOption)."," // The Active/Inactive status badge uses `statusLabel` (identity in English);"," // `status=` itself stays the raw wire value. `unitCode`/`unit` and item/lot"," // names are free-form farm DATA, not client copy, and stay raw — never"," // routed through a catalog or enum helper."," title: \"Feed & inventory\","," \"Receive stock as purchases; every change lands in the item's movement \""," + \"ledger. Recording feed usage against flocks arrives next.\","," loadInventoryFailed: \"Could not load inventory. Is the API up?\","," invalidCostError: \"Invalid cost.\","," itemCreatedMessage: \"Item created.\","," loadLedgerFailed: \"Could not load the movement ledger.\","," purchaseRecordedMessage: \"Purchase recorded — stock received.\","," usageRecordedMessage: \"Feed usage recorded — stock drained oldest lots first.\","," adjustQuantityRequired: \"Adjustment quantity must be a non-zero number (negative removes stock).\","," adjustReasonRequired: \"A reason is required for corrections.\","," correctionRecordedMessage: \"Correction recorded in the ledger.\","," newItemButton: \"New item\","," newItemDialogTitle: \"New inventory item\","," editItemDialogTitle: \"Edit item\","," itemNameLabel: \"Item name \","," editItemNameLabel: \"Item name\","," categoryLabel: \"Category\","," unitLabel: \"Unit \","," editUnitLabel: \"Unit\","," defaultCostLabel: \"Default cost/unit\","," addItemButton: \"Add item\","," itemPanelHeading: \"{{name}} — {{quantity}} {{unit}} on hand\","," recordPurchaseButton: \"Record purchase\","," recordUsageButton: \"Record usage\","," correctStockButton: \"Correct stock\","," // {{category}} is the ALREADY-LABELLED (inventoryCategoryLabel) category —"," // never the raw wire value. \"Feed, Supplement, and Additive\" names the"," // fixed feedable set (mirrors FEEDABLE_CATEGORIES) as screen prose, not a"," // dynamic enum render."," \"{{category}} items aren't fed to flocks — usage applies to Feed, \""," + \"Supplement, and Additive items only.\","," noFlocksForUsageMessage: \"No flocks — usage needs a flock to feed.\","," correctionsNeedAdminMessage: \"Stock corrections need an admin.\","," noLotsMessage: \"No lots yet — corrections target a received lot.\","," recordPurchaseDialogTitle: \"Record purchase — {{name}}\","," receivedLabel: \"Received\","," // {{unit}} is the item's free-form unit code (DATA), not an enum label —"," // shared verbatim across the purchase/usage/adjust dialogs."," unitCostLabel: \"Unit cost\","," unitCostWithCurrencyLabel: \"Unit cost ({{code}})\","," costPlaceholderItemDefault: \"item default\","," costPlaceholderRequired: \"required\","," lotNumberLabel: \"Lot #\","," recordPurchaseSubmitButton: \"Record purchase\","," recordUsageDialogTitle: \"Record usage — {{name}}\","," depletedFlockSuffix: \" (depleted — backfill only)\","," recordUsageSubmitButton: \"Record usage\","," // Correct-stock dialog. The Type picker's two options are DECORATED"," // screen copy, not the ledger's inventoryMovementLabel identity text —"," // see the namespace header comment above."," correctStockDialogTitle: \"Correct stock — {{name}}\","," lotFieldLabel: \"Lot\","," adjustTypeAdjustmentOption: \"Adjustment (±)\","," adjustTypeDiscardOption: \"Discard (write-off)\","," adjustQuantityPlaceholderDiscard: \"amount discarded\","," adjustQuantityPlaceholderCorrection: \"± correction\","," recordCorrectionButton: \"Record correction\","," ledgerDateHeader: \"Date\","," ledgerTypeHeader: \"Type\","," ledgerQuantityHeader: \"Quantity\","," ledgerNoteHeader: \"Note\","," noMovementsMessage: \"No movements yet — record a purchase above.\","," closeButton: \"close\","," categoryHeader: \"Category\","," onHandHeader: \"On hand\","," defaultCostHeader: \"Default cost\","," openButton: \"open\","," // Product catalog — what the farm sells — + packed-unit (egg-unit)"," // conversions admin screen (Task 17, #182, batch B3 — second B3 screen)."," // `products` is in TRANSLATED_NAMESPACES, same treatment as"," // dashboard/water/grades/inventory above: es/tl are machine-drafted (#182),"," // pending native review. The Active/Inactive status display on BOTH"," // tables (the products table's StatusBadge and the packed-unit table's plain-text"," // cell) goes through the `enums` `statusLabel` helper, not a key here —"," // see ProductsPage.tsx. `unitCode`/`defaultUnit`, product names, and grade"," // names are free-form farm/API DATA, not client copy, and stay raw — never"," // routed through the catalog or an enum helper. `eggsPerUnit` below is the"," // one COPY string that interpolates a raw DATA value (the packed-unit"," // dialog's title)."," title: \"Products\","," // Imperative messages (the mount-effect catch, and the price parser's"," // thrown errors — caught inside the create/edit submit handlers — see"," loadCatalogFailed: \"Could not load the catalog. Is the API up?\","," enterPriceAsNumber: \"Enter the price as a plain number.\","," \"What the farm sells. Each egg product maps to an egg grade — sales \""," + \"draw stock from that grade's lots. Deactivating removes a product \""," + \"from pickers; history keeps its name.\","," // Page-head button + New/edit product dialogs. `newProductButton` (the"," // page's action button) and `newProductDialogTitle` share English text"," // today but are separate keys, one per UI role — same treatment as"," newProductButton: \"New product\","," newProductDialogTitle: \"New product\","," editProductDialogTitle: \"Edit product\","," // Product form labels — identical text in both the create and edit"," // dialogs, so one key each covers both (like inventory:defaultCostLabel)."," gradeLabel: \"Grade\","," pickGradeOption: \"Pick a grade…\","," soldPerLabel: \"Sold per\","," // {{code}} is the account's (create dialog) or the row's own snapshot"," // (edit dialog) currency code — free-form DATA, shared verbatim by both."," defaultPriceLabel: \"Default price\","," defaultPriceWithCurrencyLabel: \"Default price ({{code}})\","," // Lowercase placeholder text, distinct from common.optional (\"Optional\")"," // — same case-sensitive-variant treatment as grades:saleableYesBadge."," priceOptionalPlaceholder: \"optional\","," notesLabel: \"Notes\","," addProductButton: \"Add product\","," // Packed-unit (egg-unit-conversion) dialog. {{unitCode}} is the"," // conversion's free-form unit code (DATA) — this is COPY with a data"," // interpolation, not an enum render."," eggsPerUnit: \"Eggs per {{unitCode}}\","," // Fallback dialog title before a conversion is selected — in practice"," // never visible (the dialog only opens once editingConv is set), kept"," // for source fidelity with the pre-sweep ternary."," packedUnitDialogTitle: \"Packed unit\","," eggsPerUnitFieldLabel: \"Eggs per unit\","," // Lowercase checkbox label, distinct from enums:status.Active (\"Active\")"," // — this is the form field, not a status display."," activeCheckboxLabel: \"active\","," // Products table — separate keys from the form labels above even where"," // the English text coincides (same treatment as water:flockLabel/"," // flockHeader)."," noProductsMessage: \"No products yet.\","," soldPerHeader: \"Sold per\","," defaultPriceHeader: \"Default price\","," // Shared by BOTH tables on this screen (products + packed units) — same"," // word, same status-column meaning, on the same page."," // Row-action links, shared by BOTH tables' edit buttons (same meaning:"," // open that row's edit dialog)."," packedUnitsHeading: \"Packed units\","," \"How many eggs each unit holds when selling (a carton is 12, 18, or \""," + \"30 depending on your market — set yours). Changing a unit only \""," + \"affects future sales; recorded orders keep the count they were \""," + \"sold with.\","," unitHeader: \"Unit\","," eggsPerUnitHeader: \"Eggs per unit\","," alwaysOneMessage: \"always 1\","," // Egg stock summary + drill-down screen — by-grade balances expand into"," // lots, and each lot expands into its movement ledger (Task 18, #182, batch"," // B3 — third B3 screen). `stock` is in TRANSLATED_NAMESPACES, same"," // treatment as nav/numberField/errorBoundary/themeToggle/useConfirm/pwa/"," // dailyEntry/dashboard/water/grades/inventory/products above: es/tl are"," // machine-drafted (#182), pending native review. The one closed-vocabulary"," // display on this screen — the movement ledger's Type cell — goes through the"," // `enums` `stockMovementLabel` helper, not a key here — see StockPage.tsx."," // All eight EggMovementType values are identity-labelled in English today,"," // so wiring it changes nothing visible (confirmed in the report). There is"," // no Active/Inactive status display on this screen. Grade/lot names, dates,"," // and quantity/delta values are free-form farm DATA, not client copy, and"," // stay raw — never routed through the catalog or an enum helper."," // Imperative messages (mount-effect / drill-down catch handlers — see"," loadStockFailed: \"Could not load stock. Is the API up?\","," loadLotsFailed: \"Could not load the grade's lots.\","," loadMovementsFailed: \"Could not load the lot's movements.\","," // Shared by BOTH tables on this screen (by-grade balances + the lots"," // drill-down) — same word, same \"quantity available\" meaning, on the"," // same page, same treatment as products:statusHeader."," lotsButton: \"lots\","," hideLotsButton: \"hide lots\","," // {{available}}/{{grades}} are the client-side reduce totals — plain"," // numeric DATA, not enum-labelled."," \"{{available}} eggs available across {{grades}} grade(s). \""," + \"Restricted = under medication withdrawal, blocked from sale.\","," lotsHeading: \"Lots\","," noLotsMessage: \"No lots for this grade yet.\","," producedOnHeader: \"Produced on\","," producedHeader: \"Produced\","," hideHistoryButton: \"hide history\","," // Movement ledger drill-down (per lot). Type reads the RAW server value"," // through stockMovementLabel — the full EggMovementType enum is covered"," // (there is no picker on this read-only screen)."," movementLedgerHeading: \"Movement ledger\","," \"Every change to this lot's available eggs — the running sum always \""," + \"equals the balance above.\","," ledgerWhenHeader: \"When (UTC)\","," ledgerChangeHeader: \"Change\","," ledgerReasonHeader: \"Reason\","," // Flock roster + bird ledger — create/edit identity fields, deplete/archive/"," // reactivate lifecycle, and mortality/cull/adjustment movements (Task 19,"," // #182, batch B3 — the last B3 screen (B4–B6 still remain in the sweep)."," // `flocks` is in TRANSLATED_NAMESPACES, same treatment as"," // dashboard/water/grades/inventory/products/stock above: es/tl are"," // machine-drafted (#182), pending native review. Two closed-vocabulary"," // FlocksPage.tsx:"," // 1. The bird ledger's Type PICKER (Cull/Adjustment — Mortality is"," // system-generated from daily-entry deaths, so it never appears there)"," // AND the ledger's Type CELL (the full Mortality/Cull/Adjustment"," // vocabulary) both use `flockMovementLabel`."," // 2. The flocks table's Status badge uses `statusLabel` (identity in"," // English); `status=` itself stays the raw wire value."," // Both are identity-labelled in English today, so wiring them changes"," // nothing visible (confirmed in the report). Flock `name`/`breed` are"," // free-form farm DATA, not client copy, and stay raw — never routed through"," // the catalog or an enum helper."," title: \"Flocks\","," // Imperative messages (mount-effect / ledger-load catch handlers — see"," loadMovementsFailed: \"Could not load movements.\","," newFlockButton: \"New flock\","," \"Deplete when the birds are gone; archive to hide a flock from pickers and \""," + \"the dashboard. History keeps resolving archived flocks' names.\","," breedLabel: \"Breed \","," // Reused verbatim by the record-movement dialog below (same text, no"," // asterisk in either) — same treatment as inventory:defaultCostLabel/"," // quantityLabelWithUnit reused across that screen's dialogs."," addFlockButton: \"Add flock\","," // Edit-flock dialog — seeded from the row."," editFlockDialogTitle: \"Edit flock\","," editNameLabel: \"Edit name\","," editBreedLabel: \"Edit breed\","," editPlacedLabel: \"Edit placement date\","," editCountLabel: \"Edit bird count\","," // Show-archived toggle. {{count}} is the client-side archived-flock"," // count — plain numeric DATA, not enum-labelled."," showArchivedLabel: \"show {{count}} archived\","," noFlocksMessage: \"No flocks yet.\","," // Flocks table — separate keys from the form labels above even where the"," // English text coincides (same treatment as water:flockLabel/"," breedHeader: \"Breed\","," placedHeader: \"Placed\","," ageHeader: \"Age\","," birdsHeader: \"Birds\","," // {{weeks}} is the client-side ageWeeks() computation — plain numeric"," // DATA, not enum-labelled."," ageWeeksSuffix: \"{{weeks}} wk\","," // Row actions — lowercase link-styled buttons, same treatment as"," // sales:edit/grades:editButton. openLedgerButton/closeLedgerButton toggle"," // the bird-ledger panel below, same treatment as stock:lotsButton/"," // hideLotsButton."," depleteButton: \"deplete\","," archiveButton: \"archive\","," reactivateButton: \"reactivate\","," openLedgerButton: \"birds\","," closeLedgerButton: \"close\","," // Deplete/archive confirm dialogs (title / body / confirmLabel). {{name}}"," // is the flock's free-form NAME (DATA), not client copy."," depleteConfirmTitle: \"Deplete \\\"{{name}}\\\"?\","," \"The flock stops accepting new entries. Backfilling past dates still works.\","," depleteConfirmLabel: \"Deplete flock\","," archiveConfirmTitle: \"Archive \\\"{{name}}\\\"?\","," \"It disappears from pickers and the dashboard, and accepts nothing new.\","," archiveConfirmLabel: \"Archive flock\","," // Bird ledger panel. {{name}} is the flock's free-form NAME (DATA)."," ledgerHeading: \"Bird ledger — {{name}}\","," ledgerIntro: \"Mortality rows come from submitted daily entries.\","," \" Record culls here; use a negative adjustment to correct a miscount.\","," ledgerIntroWorkerNote: \" Recording culls and adjustments needs an admin.\","," recordMovementButton: \"Record movement\","," // Record-movement dialog. The Type picker's two options read the"," // ledger's OWN identity label (flockMovementLabel) — see the namespace"," // header comment above."," recordMovementDialogTitle: \"Record bird movement\","," recordButton: \"Record\","," noMovementsMessage: \"No movements yet — the flock is at its initial count.\","," // Movement ledger table — separate keys from the form labels above even"," // where the English text coincides (same treatment as the flocks table"," // above)."," ledgerBirdsHeader: \"Birds\","," // Farm settings — admin localization + logo (#123, #149) + the currency"," // lock (§4.6) (Task 21, #182, batch B4). `settings` is in"," // themeToggle/useConfirm/pwa/dailyEntry/dashboard/water/grades/inventory/"," // products/stock/flocks above: es/tl are machine-drafted (#182), pending"," //"," // DATA left raw, never routed through this catalog: the timezone list"," // (Intl.supportedValuesOf), the locale/currency VALUES the admin types, the"," // \"en-US\" locale-format example (allowlisted in i18n-scan-allowlist.txt),"," // and the curated palettes' lowercase ids (aubergine/forest/slate/"," // terracotta — matched by exact-match CSS selectors and written into"," // data-brand). Their DISPLAY names (paletteAubergine etc. below) ARE copy."," // Enum wiring: the Unit system and First day of week SELECTs are closed"," // vocabularies, so their OPTION text is rendered through the shared"," // `enums.ts` helpers (unitSystemLabel/weekdayLabel — both pre-built for"," // this screen, identity labels, no visible change) rather than a key here;"," // unitSystemLabel/firstDayOfWeekLabel below are the FIELD labels, not the"," // option text. The four palette ids have no cross-screen enum family (this"," // is their only render site), so their display names are flat keys here"," // instead — see the PALETTE_LABEL_KEYS map in SettingsPage.tsx."," heading: \"Farm settings\","," \"How this farm names itself, and the locale, timezone and currency it \""," + \"records and reads its work in.\","," loadFailedMessage: \"Could not load farm settings.\","," logoAlt: \"Current farm logo\","," logoLoadingMessage: \"Loading the logo…\","," logoLoadFailedMessage: \"The logo could not be loaded.\","," logoNoneMessage: \"No logo set — the sidebar shows the Cluckwork mark.\","," uploadLogoButton: \"Upload a logo\","," replaceLogoButton: \"Replace the logo\","," removeLogoButton: \"Remove\","," // {{cap}} is formatByteCap()'s already-formatted string (e.g. \"2 MB\") —"," // client-side arithmetic, never routed through i18n.language."," \"PNG, JPEG or WebP, up to {{cap}} and 4096 px a side. Animated \""," + \"images are not accepted. The image is stored re-written, with \""," + \"camera and location metadata removed.\","," // key — the only string on this screen interleaving JSX"," // (square), see CONTRIBUTING-i18n.md."," \"Use a square image — the logo shows small in the \""," + \"sidebar, so a simple, tightly-cropped mark (a symbol or a single \""," + \"letter) reads far better there than a wide or detailed picture. A \""," + \"transparent background on a light design works best.\","," logoWorkingMessage: \"Working…\","," logoUpdatedMessage: \"Logo updated.\","," logoRemovedMessage: \"Logo removed.\","," // {{actualKb}}/{{limitKb}} are plain numeric DATA (the picked file's size"," // and the server's own configured cap), not enum-labelled."," logoOversizeMessage: \"That image is {{actualKb}} KB. The limit is {{limitKb}} KB.\","," removeLogoConfirmTitle: \"Remove the farm logo?\","," \"The sidebar goes back to the Cluckwork mark. You can upload another \""," + \"at any time.\","," removeLogoConfirmLabel: \"Remove logo\","," farmNameLabel: \"Farm name\","," timezoneLabel: \"Timezone\","," \"This browser does not know that timezone, so dates here would follow \""," + \"the device instead of the farm. Pick one from the list.\","," // {{code}} is the farm's currency CODE (DATA, e.g. \"USD\"), not enum-labelled."," \"The currency is fixed at {{code}}: this farm has already recorded \""," + \"amounts in it. Recorded money is never re-priced, so changing this \""," + \"would leave every stored total meaning something else.\","," unitSystemLabel: \"Unit system\","," firstDayOfWeekLabel: \"First day of week\","," // Reused for the First-day-of-week \"no override\" option AND both the"," // date/time format placeholders — same English text, same meaning, in"," // all three spots."," followLocaleOption: \"Follow the locale\","," paletteLegend: \"Farm palette\","," \"The accent colour for everyone on this farm. Each person still \""," + \"chooses light or night mode for themselves.\","," // Curated palette DISPLAY names (#149) — the ids themselves stay raw DATA"," // (see the namespace header comment above)."," paletteAubergine: \"Aubergine\","," paletteForest: \"Forest\","," dateFormatLabel: \"Date format\","," timeFormatLabel: \"Time format\","," savingButton: \"Saving…\","," saveButton: \"Save settings\","," \"The timezone applies everywhere as soon as it is saved. Locale, unit \""," + \"system and the format overrides are recorded against the farm and \""," + \"will drive how amounts, dates and measurements are displayed once \""," + \"that formatting lands.\","," savedMessage: \"Settings saved.\","," // Imperative messages (event handlers — see CONTRIBUTING-i18n.md's"," \"Someone else changed these settings while this screen was open. \""," + \"Reload and try again.\","," \"Saved. This screen could not read the settings back — reload the \""," + \"page before saving again.\","," \"Saved. The rest of the app could not pick the change up — reload the \""," + \"page to be sure it is applied everywhere.\","," // Users admin screen — the user list plus create/edit/password/flock-"," // scoping dialogs (Task 22, #182, batch B4). `users` is in"," // products/stock/flocks/settings above: es/tl are machine-drafted (#182),"," // pending native review."," // Role enum wiring: the table's Role cell, the create-form Role picker's"," // option text, and the create-success message all render the closed"," // `role` vocabulary through roleLabel() (enums.ts) rather than a key here"," // — see the `enums` namespace header comment below for the one"," // intentional visible change that wiring makes (ReadOnly -> \"Read-only\")."," // adminRoleOption below is the one exception: the picker's Admin option"," // carries an extra \"(owner)\" qualifier that isn't part of the role's"," // identity label, so it wraps roleLabel(\"Admin\") rather than being used"," // as the option text on its own."," heading: \"Users\","," newUserButton: \"New user\", // reused verbatim as the create-dialog title"," \"Workers record the day's work (optionally narrowed to assigned \""," + \"flocks). Managers additionally correct, void, and configure. Sales \""," + \"handles customers, orders, and payments. Read-only sees stock, \""," + \"history, and reports. Admin (owner) does everything, including \""," + \"managing users.\","," passwordFieldLabel: \"Password (min 12 chars) \","," nameFieldLabel: \"Name\", // reused verbatim by the edit-user dialog below"," roleFieldLabel: \"Role\","," // {{label}} is roleLabel(\"Admin\") (\"Admin\", identity) — see the"," // namespace header comment above."," adminRoleOption: \"{{label}} (owner)\","," createUserButton: \"Create user\","," // #308 — step-up re-confirmation, shown only for the two sensitive cases"," // (creating another Owner; resetting an existing Owner's password)."," // Shared field label; distinct hints explain WHY it appeared for each."," stepUpFieldLabel: \"Your current password \","," stepUpCreateHint: \"Creating another Owner needs your current password again.\","," stepUpResetHint: \"Resetting an Owner's password needs your current password again.\","," nameColumnHeader: \"Name\","," roleColumnHeader: \"Role\","," flocksButton: \"flocks\","," // Flock-access dialog (per-worker scoping). {{email}} is the user's"," // email — DATA, not client copy."," flockAccessTitle: \"Flock access — {{email}}\","," \"No assignments = the worker can record for any flock. The first \""," + \"assignment narrows them to the listed flocks only.\","," noAssignmentsMessage: \"No assignments — account-wide access.\","," removeAssignmentButton: \"remove\","," assignFlockButton: \"Assign flock\","," doneButton: \"Done\","," // Edit-user dialog. {{email}} is DATA."," editUserTitle: \"Edit user — {{email}}\","," clearNameHint: \"Leave blank to clear the name.\","," // Set-password dialog. {{email}} is DATA."," setPasswordTitle: \"Set password — {{email}}\","," \"You don't need their current password. Setting it signs them out \""," + \"of every device — tell them the new password directly.\","," newPasswordFieldLabel: \"New password (min 12 chars) \","," confirmPasswordFieldLabel: \"Confirm new password \","," setPasswordButton: \"Set password\","," // imperative i18n.t() pattern). {{email}} is DATA; {{role}} is"," // roleLabel(role) — see the namespace header comment above."," createSuccessMessage: \"{{role}} account created for {{email}}.\","," passwordMismatchMessage: \"The passwords don't match.\","," passwordSetMessage:"," \"Password set for {{email}}. They have been signed out everywhere.\","," updatedMessage: \"Updated {{email}}.\","," // Expenses screen — category management (a dialog panel: create/deactivate/"," // reactivate) + record/correct expenses, filtered by month and category"," // (Task 23, #182, batch B4 — the last B4 screen). `expenses` is in"," // products/stock/flocks/settings/users above: es/tl are machine-drafted"," // PLAN CORRECTION (verified by controller): this screen has NO"," // payment-method/category enum. `ExpenseCategory` rows are free-form,"," // admin-created records (createExpenseCategory), not a closed API"," // vocabulary — so category NAMES stay raw DATA everywhere they render (the"," // filter option, the add/edit pickers, the category-list rows, the"," // deactivated-suffix rows) and are never routed through an enums.ts helper."," // Expense descriptions, notes, dates, amounts, and flock names are the same"," // kind of free-form farm DATA and stay raw too. Money stays on the existing"," // farm-locale `formatMoney` — never `i18n.language` (formattingIndependence"," // guard)."," // Money-decimal validation copy (enterValidAmount/noDecimalPlaces/"," // atMostDecimals/enterAmountGreaterThanZero) duplicates sales/products'"," // near-identical strings but is kept as its OWN local key set here per the"," // task brief — a cross-screen consolidation is a tracked native-pass"," // deferral, not this task's job."," title: \"Expenses\","," expenseRecordedMessage: \"Expense recorded.\","," expenseCorrectedMessage: \"Expense corrected.\","," // 409 rebind (onSaveEdit): someone else corrected this expense while the"," // dialog was open — the panel is rebound to the server's latest values."," \"This expense was changed by someone else — the form now shows the \""," + \"latest values; re-apply your correction.\","," categoryCreatedMessage: \"Category created.\","," // {{name}} is the category's free-form NAME (DATA), not client copy."," categoryDeactivatedMessage: \"Category \\\"{{name}}\\\" deactivated.\","," categoryReactivatedMessage: \"Category \\\"{{name}}\\\" reactivated.\","," // Amount-parsing validation (toMinorUnits, thrown from the add/edit"," // submit handlers — imperative i18n.t() pattern, same shape as"," // products:enterPriceAsNumber/noDecimalPlaces/atMostDecimals)."," monthLabel: \"Month\","," // Shared by the filter select, the add-form select, and the edit-form"," // select — all three already carry this identical label in source."," allCategoriesOption: \"All categories\","," hideCategoriesButton: \"hide categories\","," manageCategoriesButton: \"manage categories\","," // {{amount}} is formatMoney's already-formatted total — farm-locale DATA,"," // never routed through i18n.language."," monthTotalLabel: \"Month total: {{amount}}\","," categoriesHeading: \"Expense categories\","," newCategoryButton: \"New category\","," newCategoryDialogTitle: \"New expense category\","," categoryNameLabel: \"Category name\","," addCategoryButton: \"Add category\","," // Appended to a deactivated category's free-form NAME (DATA) — shared by"," // the filter option, the category-list row, and the edit-form select."," deactivatedSuffix: \" (deactivated)\","," noCategoriesMessage: \"No categories yet — add one above.\","," recordExpenseHeading: \"Record an expense\","," dateLabel: \"Date\", // shared by the add and edit forms"," pickOption: \"— pick —\","," descriptionLabel: \"Description\", // shared by the add and edit forms"," // {{code}} is the loaded/snapshot currency CODE (DATA) — shared by the"," // add form (currency.code) and the edit form (editing.currencyCode)."," amountLabel: \"Amount ({{code}})\","," flockOptionalLabel: \"Flock (optional)\", // shared by the add and edit forms"," noneOption: \"— none —\","," noteOptionalLabel: \"Note (optional)\", // shared by the add and edit forms"," recordExpenseButton: \"Record expense\","," addCategoryFirstMessage: \"Add a category first — every expense needs one.\","," // Correct-expense dialog. {{date}}/{{description}} are the expense's own"," // free-form DATA, not client copy."," correctExpenseDialogTitle: \"Correct expense\","," correctExpenseDialogTitleWithExpense: \"Correct — {{date}}, {{description}}\","," noExpensesMessage: \"No expenses for this month.\","," descriptionHeader: \"Description\","," // Customers screen — the customer book: list + create dialog, with an"," // admin-only outstanding-balance column (Task 24, #182, batch B4)."," // `customers` is in TRANSLATED_NAMESPACES, same treatment as"," // dashboard/water/grades/inventory/products/stock/flocks/settings/users/"," // expenses above: es/tl are machine-drafted (#182), pending native"," // review."," // No status/enum on this screen — Customer has no closed-vocabulary field,"," // so nothing here routes through enums.ts. Customer name/phone/email/"," // address/note are free-form farm DATA (createCustomer's own fields) and"," // stay raw everywhere they render, including the \"—\" placeholder for a"," // blank optional field (shared convention across the sweep — see"," // ExpensesPage/UsersPage/FlocksPage, which leave the em dash un-keyed too)."," // Outstanding balances stay on the existing farm-locale `formatMoney` —"," // never `i18n.language` (formattingIndependence guard)."," title: \"Customers\","," newCustomerButton: \"New customer\", // reused verbatim as the create-dialog title"," nameFieldLabel: \"Name \","," phoneFieldLabel: \"Phone \","," noteFieldLabel: \"Note\","," addCustomerButton: \"Add customer\","," // Imperative messages (mount-effect .catch callbacks — see"," loadCustomersErrorMessage: \"Could not load customers.\","," loadBalancesErrorMessage: \"Could not load customer balances.\","," noCustomersMessage: \"No customers yet.\","," phoneHeader: \"Phone\","," outstandingHeader: \"Outstanding\","," // Daily-entry history — browse recorded entries with flock/date filters,"," // plus the admin-only adjust/void corrections (Task 27, #182, batch B5 —"," // the last B4-onward records/export screen). `history` is in"," // products/stock/flocks/settings/users/expenses/customers above: es/tl are"," // machine-drafted (#182), pending native review."," // Entry-status pills (statusCell): DELIBERATELY NOT routed through the"," // shared `enums` status family, even though enums.status already carries"," // Draft/Submitted/Locked/ManagerAdjusted/Voided (Task 4/12) — this screen's"," // bespoke pills predate that helper and keep their OWN display text here"," // (statusVoided/statusAdjusted/statusLocked/statusSubmitted/statusDraft),"," // per the task brief. Text is identical to enums' labels (identity, plus"," // ManagerAdjusted -> \"Adjusted\"), so this is a naming/ownership choice, not"," // a visible difference — see the `enums` namespace header comment, which"," // already points AT this screen's own \"Adjusted\" pill as the precedent"," // Dashboard's retrofit matched. lockedAt interpolates the raw lockedAtUtc"," // timestamp (DATA) into the tooltip text (COPY)."," // The nothingToAdjustMessage 409-rebind message interpolates"," // fresh.status.toLowerCase() — lowercasing a raw wire enum value is"," // locale-fragile (only ever reads correctly in English); tracked as a"," // native-pass deferral (#182), not solved by this task (see the code"," // comment at the call site, HistoryPage.tsx rebindAfterConflict)."," // DATA left raw, never routed through this catalog: entry dates"," // (e.date/adjusting.date), flock/grade names (flockName/gradeName, with"," // their id.slice(0,8) fallback), the \"—\" placeholder for an entry with no"," // graded lines (same convention as customers/expenses/users/flocks — see"," // the `customers` namespace header comment above), free-form void/adjust"," // reasons (voidReason/adjustReason, shown via the `title` attribute or"," // interpolated verbatim into previouslyAdjusted), and every numeric count"," // (totalEggs/crackedEggs/etc., adjustedFrom's snapshot counts)."," // Titles. `loadingTitle` is the shorter heading the early-return"," // load-error state uses before the real heading below — a pre-existing"," // inconsistency, preserved verbatim rather than \"fixed\" as a drive-by"," // (same treatment as grades:loadingTitle/title)."," loadingTitle: \"History\","," title: \"Daily entry history\","," \"Submitted and locked entries can be adjusted or voided here — stock \""," + \"and the bird ledger follow automatically; eggs already sold never \""," + \"move. A reason is always required.\","," // CONTRIBUTING-i18n.md's imperative i18n.t() pattern). Several of these"," // are near-duplicate concurrent-conflict copy at different call sites"," // (errText's own 409 branch vs. onVoid's inline 409 branch, and the two"," // \"could not reload\" variants) — kept as separate, text-preserving keys"," // rather than consolidated, matching the sweep's convention of not"," // drive-by-fixing pre-existing copy drift."," \"This entry was just changed elsewhere — the list has been reloaded; retry.\","," loadFlocksGradesFailed: \"Could not load flocks/grades.\","," loadEntriesFailed: \"Could not load entries.\","," \"This entry was changed by someone else — the form shows the latest \""," + \"values; re-apply your correction.\","," // {{status}} is the RAW wire status, lowercased — see the locale-fragile"," // note in the namespace header comment above."," nothingToAdjustMessage: \"This entry is now {{status}} — nothing left to adjust.\","," \"This entry was changed by someone else and the list could not be \""," + \"reloaded — reload the page before retrying.\","," \"Graded quantities cannot exceed total eggs minus cracked/dirty/discarded.\","," entryAdjustedMessage: \"Entry adjusted — stock and bird ledger updated to match.\","," adjustReloadFailedMessage: \"The adjustment saved, but the list failed to reload — refresh the page.\","," // askReason dialog (title / body / confirmLabel). {{date}}/{{flock}} are"," // the entry's own free-form DATA (date string, resolved flock name)."," voidConfirmTitle: \"Void the {{date}} entry for {{flock}}?\","," \"Its egg lots empty and its deaths are reversed. The entry is kept as \""," + \"Voided. Refused if any of its eggs were already sold.\","," voidConfirmLabel: \"Void entry\","," entryVoidedMessage: \"Entry voided — its egg lots were emptied and its deaths reversed.\","," voidReloadFailedMessage: \"The void saved, but the list failed to reload — refresh the page.\","," voidConflictMessage: \"This entry was changed by someone else — the list has been reloaded; retry.\","," + \"reloaded — reload the page.\","," loadMoreFailedMessage: \"Could not load more.\","," allFlocksOption: \"All flocks\","," // Adjust dialog — title (two shapes: an entry bound vs. the fallback"," // before one is), the \"previously adjusted\" recap, and the form."," adjustDialogTitle: \"Adjust entry\","," adjustDialogTitleWithEntry: \"Adjust — {{date}}, {{flock}}\","," // {{total}}/{{mortality}} are the prior snapshot's numeric DATA;"," // {{reason}} is the free-form adjustReason DATA."," \"Previously adjusted (was total {{total}}, mortality {{mortality}} — \\\"{{reason}}\\\").\","," deathsLabel: \"Deaths\","," // Appended to a grade line's free-form NAME (DATA) for a deactivated"," // grade still on the entry — distinct wording from"," // dailyEntry:deactivatedGradeSuffix (\" (deactivated)\"), preserved"," // verbatim rather than reconciled (not this task's job)."," inactiveGradeSuffix: \" (inactive)\","," saveAdjustmentButton: \"Save adjustment\","," noEntriesMatch: \"No entries match — record one on the Daily entry page.\","," lossesHeader: \"Losses (cr/di/ds)\","," gradedHeader: \"Graded\","," // Lowercase link-styled row actions, same treatment as"," // sales:edit/water:correctButton/grades:editButton."," adjustButton: \"adjust\","," voidButton: \"void\","," // Entry-status pills (statusCell) — see the namespace header comment"," // above for why this is a separate vocabulary from enums:status."," statusVoided: \"Voided\","," statusAdjusted: \"Adjusted\","," statusLocked: \"Locked\","," // {{time}} is the raw lockedAtUtc timestamp (DATA)."," lockedAt: \"Locked {{time}}\","," statusSubmitted: \"Submitted\","," // Task 28 (#182, B5) — ReportsPage. `reports` is in TRANSLATED_NAMESPACES,"," // same as `history`/`nav`: es/tl are machine-drafted (#182), pending"," // native review. Production renders for everyone; the Money section"," // (sales/expenses/profit) is admin-gated — isAdmin is checked by the"," // component, not this catalog."," // DATA left raw, never routed through this catalog: every date"," // (d.date/from/to), every numeric count/total (totalEggs, cracked/dirty/"," // discarded, sellable, deaths, henDays, henDayPct and their period"," // equivalents), the \"—\" em-dash fallback for a null henDayPct (same"," // convention as customers/expenses/users/flocks/history's raw \"—\"), the"," // grade-totals and expense-category lists (built from free-form"," // name/quantity DATA via template-literal `.join(\", \")`, matching"," // HistoryPage's gradeName-list precedent), and every money string"," // (formatMoney is farm-locale-driven, never keyed off i18n.language —"," // interpolated into the templates below as pre-formatted DATA, same"," // pattern as sales:orderTotal)."," title: \"Reports\","," productionHeading: \"Production\","," sellableHeader: \"Sellable\","," deathsHeader: \"Deaths\","," periodRowLabel: \"Period\","," gradeTotalsLabel: \"By grade:\","," moneyHeading: \"Money\","," salesRowLabel: \"Sales\","," // {{count}} is confirmedCount; {{revenue}}/{{paid}}/{{outstanding}} are"," // pre-formatted formatMoney() strings (DATA)."," \"{{count}} confirmed order(s) — revenue {{revenue}}, paid {{paid}}, outstanding {{outstanding}}\","," // {{count}} is voidedCount — a second, independent {{count}} interpolation"," // on the same screen, appended only when voidedCount > 0."," salesVoidedSuffix: \" ({{count}} voided)\","," expensesRowLabel: \"Expenses\","," expensesNone: \"none recorded\","," // {{total}} is expenses.grandTotalMinorUnits, pre-formatted (DATA)."," profitRowLabel: \"Profit (basic)\","," // (not t()) — the only JSX interleaved in this screen's prose is"," // the around the profit figure, same treatment as"," // account:roleLine. {{revenue}}/{{expenses}}/{{profit}} are pre-formatted"," // formatMoney() strings (DATA); the \"−\" is U+2212 MINUS SIGN (matching"," // the pre-sweep source), not a hyphen."," profitLine: \"revenue {{revenue}} − expenses {{expenses}} = {{profit}}\","," \"\\\"Basic\\\" profit is confirmed revenue minus recorded expenses — no \""," + \"cost-of-goods or inventory valuation.\","," // Task 29 (#182, B5) — AuditPage. `audit` is in TRANSLATED_NAMESPACES, same"," // as `history`/`nav`/`reports`: es/tl are machine-drafted (#182), pending"," // native review. The #93 read-only audit trail (admin). The action/entity"," // table cells and the action filter's option text route through"," // enums:auditAction./enums:entityType.* (also translated — see the"," // `enums` header comment below), NOT this namespace. DATA left raw, never"," // routed through this catalog:"," // every timestamp (e.occurredAtUtc), actorEmail, entityId, and the \"—\""," // em-dash fallback for a null reason (same convention as"," // customers/expenses/users/flocks/history's raw \"—\")."," heading: \"Audit log\","," \"Every corrective, destructive, or configuration change — who did it, \""," + \"when, and why. Rows are written with the change itself and never \""," + \"edited.\","," actionFilterLabel: \"Action\","," allActionsOption: \"All actions\","," whenHeader: \"When (UTC)\","," whoHeader: \"Who\","," actionHeader: \"Action\","," entityHeader: \"Entity\","," reasonHeader: \"Reason\","," emptyMessage: \"No audit events yet.\","," // Task 30 (B5, #182) — ExportPage: the manual-backup screen (#95,"," // admin-only). `export` is in TRANSLATED_NAMESPACES, same as"," // `audit`/`history`: es/tl are machine-drafted (#182), pending native"," // review. CSV column headers and file contents are generated SERVER-side"," // (Cluckwork.Api/Endpoints/Export/CsvExport.cs) and are NOT"," // client strings — out of scope here. Only the visible page copy below"," // (headings, buttons, and the dataset picker's own labels) is externalized;"," // the download filenames (`cluckwork-${d}.csv`, \"cluckwork-backup.zip\")"," // stay raw, unkeyed — they're functional identifiers, not display copy, and"," // changing them would be a download-mechanics change (out of scope)."," \"Download your account's data as CSV files — a manual backup you can \""," + \"keep anywhere. Money values are exported in minor units (cents) \""," + \"with their currency, exactly as stored.\","," fullBackupHeading: \"Full backup\","," fullBackupButton: \"Download full backup (zip)\","," fullBackupHint: \"One zip with every dataset below plus a manifest of row counts.\","," // Shared between the full-backup button and every dataset button (each"," // uses its own `busy === ` check) — one in-flight-download label,"," // not a per-button duplicate."," preparingButton: \"Preparing…\","," singleDatasetsHeading: \"Single datasets\","," // Dataset picker labels — one flat \"dataset.\" key per"," // EXPORT_DATASETS member (../api/cluckwork), text IDENTICAL to the raw"," // wire slug (same \"value equals the enum member\" convention as"," // sales:unit/method, en.ts ~L252). Keeps the button's accessible name"," // byte-identical to the pre-sweep raw `{d}` render while routing display"," // through the catalog, as the task brief requires (\"a dataset NAME"," // displayed as a picker label is page copy\"). A future native-translation"," // pass can replace these with humanized/localized text without touching"," // ExportPage.tsx."," \"dataset.flocks\": \"flocks\","," \"dataset.bird-movements\": \"bird-movements\","," \"dataset.daily-entries\": \"daily-entries\","," \"dataset.daily-entry-grades\": \"daily-entry-grades\","," \"dataset.egg-grades\": \"egg-grades\","," \"dataset.egg-lots\": \"egg-lots\","," \"dataset.customers\": \"customers\","," \"dataset.sales-orders\": \"sales-orders\","," \"dataset.sales-order-items\": \"sales-order-items\","," \"dataset.sales-order-allocations\": \"sales-order-allocations\","," \"dataset.payments\": \"payments\","," \"dataset.inventory-items\": \"inventory-items\","," \"dataset.inventory-lots\": \"inventory-lots\","," \"dataset.inventory-movements\": \"inventory-movements\","," \"dataset.feed-usages\": \"feed-usages\","," \"dataset.water-usages\": \"water-usages\","," \"dataset.expense-categories\": \"expense-categories\","," \"dataset.expenses\": \"expenses\","," \"dataset.egg-inventory-movements\": \"egg-inventory-movements\","," \"dataset.audit-events\": \"audit-events\","," // Closed-vocabulary labels (#182, Task 4). Consumed ONLY through the typed"," // helpers in enums.ts — never a raw t(\"enums:status.\" + value). Keys are FLAT"," // \"family.RawValue\" strings (keySeparator:false, see index.ts): the suffix is"," // the EXACT wire value the API sends, so the helper's Record can map value →"," // key mechanically and the key is self-documenting. `enums` IS in"," // TRANSLATED_NAMESPACES: es/tl carry machine-drafted enum translations"," // (#182, pending native review)."," // Labels are chosen to be TEXT-PRESERVING on retrofit (Task 5+) — a screen"," // wired to a helper keeps its current text — EXCEPT at two sites the retrofit"," // changes DELIBERATELY (its reviewer must eyeball them):"," // 1. Dashboard.tsx (``, no label) used to"," // show a ManagerAdjusted entry RAW; statusLabel (wired in Task 12) now"," // makes it read \"Adjusted\" — the text HistoryPage already shows for"," // that state via its own bespoke `Adjusted` (HistoryPage.tsx 249-250), NOT a"," // StatusBadge label."," // 2. UsersPage.tsx role table cell renders raw `{u.role}` = \"ReadOnly\";"," // roleLabel makes it read \"Read-only\" (matching the picker option)."," // Payment method and sale unit are intentionally absent — they already live"," // in the `sales` namespace (sales:method/unit, which carries its own"," // es/tl). `enums` is in TRANSLATED_NAMESPACES too (#182, pending native"," // review), so duplicating them here is no longer needed to avoid an"," // English-only regression — it would just be a redundant second copy of"," // the same vocabulary."," // status — StatusBadge's STATUS_VALUES vocabulary. Identity except"," // ManagerAdjusted, whose pill reads \"Adjusted\"."," \"status.Active\": \"Active\","," \"status.Inactive\": \"Inactive\","," \"status.Submitted\": \"Submitted\","," \"status.Locked\": \"Locked\","," \"status.ManagerAdjusted\": \"Adjusted\","," \"status.Voided\": \"Voided\","," \"status.Confirmed\": \"Confirmed\","," \"status.Shipped\": \"Shipped\","," \"status.Invoiced\": \"Invoiced\","," \"status.Cancelled\": \"Cancelled\","," \"status.Depleted\": \"Depleted\","," \"status.Archived\": \"Archived\","," // role (UsersPage) — Roles.Assignable + Worker. \"ReadOnly\" labelled"," // \"Read-only\" (matches the picker option); the raw u.role table column and"," // the picker's \"Admin (owner)\" hint are noted in the report as retrofit"," // discrepancies."," \"role.Worker\": \"Worker\","," \"role.Sales\": \"Sales\","," // water source (WaterPage picker) — WaterSource enum."," \"waterSource.Well\": \"Well\","," \"waterSource.Tank\": \"Tank\","," \"waterSource.Other\": \"Other\","," // water unit (WaterPage picker) — WaterUsage.AllowedUnits, a fixed 2-value"," // set. Labels are the unit symbols, unchanged."," // grade type (GradesPage picker) — EggGradeType enum."," \"gradeType.Size\": \"Size\","," \"gradeType.Quality\": \"Quality\","," // inventory category (InventoryPage picker) — InventoryCategory enum."," // \"EquipmentPart\" kept as one word to match current display."," \"inventoryCategory.Supplement\": \"Supplement\","," \"inventoryCategory.Additive\": \"Additive\","," \"inventoryCategory.Medication\": \"Medication\","," \"inventoryCategory.Vaccine\": \"Vaccine\","," \"inventoryCategory.Bedding\": \"Bedding\","," \"inventoryCategory.Sanitation\": \"Sanitation\","," \"inventoryCategory.EquipmentPart\": \"EquipmentPart\","," \"inventoryCategory.Other\": \"Other\","," // inventory movement type (InventoryPage ledger) — InventoryMovementType"," // enum. The ledger shows the raw server value, so the full enum is covered"," // (the adjust picker only offers Adjustment/Discard)."," \"inventoryMovement.Purchase\": \"Purchase\","," \"inventoryMovement.Usage\": \"Usage\","," \"inventoryMovement.Adjustment\": \"Adjustment\","," \"inventoryMovement.Discard\": \"Discard\","," // flock (bird) movement type (FlocksPage ledger) — BirdMovementType enum."," // Mortality is system-generated (from daily-entry deaths); the record picker"," // only offers Cull/Adjustment."," \"flockMovement.Mortality\": \"Mortality\","," \"flockMovement.Cull\": \"Cull\","," \"flockMovement.Adjustment\": \"Adjustment\","," // egg stock movement type (StockPage lot ledger) — EggMovementType enum."," // \"InternalUse\" kept as one word to match current display."," \"stockMovement.Production\": \"Production\","," \"stockMovement.Sale\": \"Sale\","," \"stockMovement.Adjustment\": \"Adjustment\","," \"stockMovement.Discard\": \"Discard\","," \"stockMovement.InternalUse\": \"InternalUse\","," \"stockMovement.Transfer\": \"Transfer\","," \"stockMovement.Void\": \"Void\","," // unit system (SettingsPage picker) — UnitSystem enum."," \"unitSystem.Metric\": \"Metric\","," // weekday (SettingsPage week-start picker) — standalone day-name labels."," \"weekday.Sunday\": \"Sunday\","," \"weekday.Monday\": \"Monday\","," \"weekday.Tuesday\": \"Tuesday\","," \"weekday.Wednesday\": \"Wednesday\","," \"weekday.Thursday\": \"Thursday\","," \"weekday.Friday\": \"Friday\","," \"weekday.Saturday\": \"Saturday\","," // audit action (AuditPage filter/table) — AuditEvent.action, a server"," // \"Entity.Verb\" capture-point code (#182, Task 29). Flat"," // \"auditAction.Entity.Verb\" keys: keySeparator:false treats the whole"," // dotted code as ONE literal key segment, so e.g. \"DailyEntry.Adjust\""," // becomes the key \"auditAction.DailyEntry.Adjust\", not a nested path."," \"auditAction.DailyEntry.Adjust\": \"Daily entry adjusted\","," \"auditAction.DailyEntry.Void\": \"Daily entry voided\","," \"auditAction.SalesOrder.Void\": \"Sales order voided\","," \"auditAction.Payment.Void\": \"Payment voided\","," \"auditAction.Expense.Adjust\": \"Expense adjusted\","," \"auditAction.ExpenseCategory.Update\": \"Expense category updated\","," \"auditAction.InventoryItem.Adjust\": \"Inventory item adjusted\","," \"auditAction.WaterUsage.Correct\": \"Water usage corrected\","," \"auditAction.Flock.BirdMovement\": \"Bird movement recorded\","," \"auditAction.Flock.Update\": \"Flock updated\","," \"auditAction.Flock.Deplete\": \"Flock depleted\","," \"auditAction.Flock.Archive\": \"Flock archived\","," \"auditAction.Flock.Reactivate\": \"Flock reactivated\","," \"auditAction.EggGrade.Update\": \"Egg grade updated\","," \"auditAction.EggGrade.Activate\": \"Egg grade activated\","," \"auditAction.EggGrade.Deactivate\": \"Egg grade deactivated\","," \"auditAction.User.Create\": \"User created\","," \"auditAction.User.Update\": \"User updated\","," \"auditAction.User.PasswordSet\": \"Password set\","," \"auditAction.User.PasswordChanged\": \"Password changed\","," \"auditAction.User.BreakGlassReset\": \"Break-glass reset\","," \"auditAction.User.FlockAssign\": \"Flock assigned to user\","," \"auditAction.User.FlockUnassign\": \"Flock unassigned from user\","," \"auditAction.Account.Export\": \"Data exported\","," \"auditAction.Account.SetLogo\": \"Farm logo set\","," \"auditAction.Account.RemoveLogo\": \"Farm logo removed\","," \"auditAction.Account.UpdateSettings\": \"Farm settings updated\","," \"auditAction.Product.Create\": \"Product created\","," \"auditAction.Product.Update\": \"Product updated\","," \"auditAction.Product.Activate\": \"Product activated\","," \"auditAction.Product.Deactivate\": \"Product deactivated\","," \"auditAction.EggUnitConversion.Update\": \"Egg unit conversion updated\","," // entity type (AuditPage table entity cell) — AuditEvent.entityType."," \"entityType.DailyEntry\": \"Daily entry\","," \"entityType.EggGrade\": \"Egg grade\","," \"entityType.EggUnitConversion\": \"Egg unit conversion\","," \"entityType.Expense\": \"Expense\","," \"entityType.ExpenseCategory\": \"Expense category\","," \"entityType.FarmLogo\": \"Farm logo\","," \"entityType.Flock\": \"Flock\","," \"entityType.InventoryItem\": \"Inventory item\","," \"entityType.Payment\": \"Payment\","," \"entityType.Product\": \"Product\","," \"entityType.SalesOrder\": \"Sales order\","," \"entityType.WaterUsage\": \"Water usage\","," // Task 32 (B6a, #182): HelpPage prose, getting-around through mistakes"," // (INCLUDING the \"Fixing mistakes\" table). The glossary table (h3"," // id=\"glossary\") is deliberately NOT here yet — Task 33 (B6b) owns it; see"," // HelpPage.tsx's scope comment. keys use NAMED tags (,"," // ) matching the components map at each call site, never numbered"," // <0>/<1>. toc* keys are the contents-rail labels — the rail's `id`s stay"," // hardcoded in HelpPage.tsx (they drive the scroll-spy + anchors)."," eyebrow: \"User guide\","," heading: \"Help\","," lead: \"How Cluckwork works, screen by screen — and how to undo mistakes.\","," contentsAriaLabel: \"Help contents\","," contentsEyebrow: \"Contents\","," // Contents-rail labels (TOC array, 2nd element). Order mirrors the sections below — see the KEEP comment at the top of"," // HelpPage.tsx. tocGlossary is the rail's link text only; the glossary"," // SECTION itself (heading + 37-row table + closing note) is externalized"," // further down, near the end of this block (Task 33, B6b)."," tocGettingAround: \"Getting around\","," tocSigningIn: \"Signing in\","," tocDailyLoop: \"The daily loop\","," tocRoles: \"Who can do what\","," tocDialogs: \"Adding & correcting\","," tocDailyEntry: \"Daily entry\","," tocFlocks: \"Flocks & birds\","," tocGrades: \"Egg grades\","," tocProducts: \"Products\","," tocInventory: \"Feed & inventory\","," tocWater: \"Water\","," tocSales: \"Customers & sales\","," tocReports: \"Reports\","," tocExpenses: \"Expenses\","," tocAudit: \"Audit log\","," tocExport: \"Export & backup\","," tocFarmSettings: \"Farm settings\","," tocFarmPalette: \"Farm palette\","," tocInstall: \"Install on a phone\","," tocMistakes: \"Fixing mistakes\","," // Getting around"," gettingAroundHeading: \"Getting around\","," \"On a computer, every screen sits in the sidebar on the left, grouped by job.\","," \"On a phone, the screens you use most are tabs across the bottom, in easy thumb reach. \""," + \"Which four you get depends on your role — a worker gets Daily entry, someone in sales gets Sales. \""," + \"Everything else is one tap away under More.\","," \"If a screen ever shows \\\"Something went wrong\\\", that is the app catching an error \""," + \"instead of leaving you on a blank page. Anything you had already saved is safe (anything you were \""," + \"still typing may need to be entered again) — tap Reload, or Back to the \""," + \"dashboard and try again. If it keeps happening, open \\\"Error details\\\" and send a screenshot.\","," // Signing in"," signingInHeading: \"Signing in\","," \"Sign in with the email and password your administrator set up. A wrong password just says \""," + \"Invalid email or password — try again.\","," \"To slow down anyone guessing passwords, sign-in attempts from the same place are limited. \""," + \"After too many tries in a few minutes you'll see \\\"Too many sign-in attempts\\\" — that \""," + \"isn't a fault, just wait a few minutes and try again. Being signed in already is never \""," + \"affected; your work carries on normally.\","," \"Separately, too many wrong passwords for one account briefly lock that account. While \""," + \"it is locked, even the correct password still says Invalid email or password. The \""," + \"lock is temporary — wait up to about 15 minutes and try again.\","," \"Your sign-in is kept in your browser securely and stays active as you work, even across reloads and \""," + \"with the app open in several tabs at once. After the app is updated \""," + \"you may be asked to sign in once more — that's expected.\","," // #308 — step-up re-confirmation for the two sensitive user-administration"," // actions. Deliberately does NOT mention \"grant\"/\"token\" — that's internal"," // mechanism, not user-facing language."," \"Two actions on the Users screen ask you to re-enter your current password \""," + \"right there in the dialog: creating another Owner, and resetting an existing Owner's password. This \""," + \"confirms it's really you before handing out that much access — every other action on that screen \""," + \"(creating a Worker/Manager/Sales/Read-only user, resetting one of their passwords) does not ask again.\","," \"Interface language. Everyone can choose the language the interface is shown in from \""," + \"Account → Preferences — English, Español, or Tagalog. Translation is a work in \""," + \"progress: the login and sales screens, error messages, and Account → Preferences \""," + \"itself are translated today; the rest of the Account screen (including the password section) and the \""," + \"rest of the app are being translated screen by screen. Until a screen is translated it simply shows \""," + \"in English, whatever language you picked.\","," // The daily loop"," dailyLoopHeading: \"The daily loop\","," \"Everything in Cluckwork hangs off one chain: you record a daily entry for each flock \""," + \"(eggs by grade, losses, deaths), you submit it, and submitting creates dated \""," + \"egg lots — that's your sellable stock. A sales \""," + \"order takes from stock when you confirm it, always oldest eggs first. Feed flows the same \""," + \"way on the input side: purchases put feed into stock, daily usage draws it down per flock.\","," dailyLoopSummary: \"Record entry → submit → egg lots → stock → order → confirm.\","," // Who can do what"," rolesHeading: \"Who can do what\","," \"Five kinds of sign-in. Workers run the daily loop — record and submit entries, \""," + \"receive feed, record feed and water usage, create flocks and customers, take orders from draft \""," + \"through confirm. A worker can be narrowed to assigned flocks: with no assignments \""," + \"they can record for any flock; the first assignment restricts them to the listed ones.\","," \"Managers do everything workers do, plus everything that undoes, corrects, or \""," + \"configures: voids, stock and water corrections, flock lifecycle, culls, the \""," + \"grade/product/item catalogs, expenses, money reports, the audit log, and exports.\","," \"Sales sign-ins handle customers, orders, and payments — but no \""," + \"production capture and no expenses. Read-only sign-ins see stock, history, and \""," + \"reports, and can change nothing.\","," \"Admin (owner) does everything a manager does and is the only role that manages users: \""," + \"creating sign-ins on the Users screen (email, password, an optional name, and role) \""," + \"and assigning workers to flocks. A user's name can be changed later from the row's edit \""," + \"action, and the password action sets a forgotten password without needing the old \""," + \"one. Changing an existing user's role comes with a later release. Controls you can't use are hidden, \""," + \"and the server refuses them regardless.\","," \"Your own password. Anyone, in any role, can change their own password on the \""," + \"Account screen by entering the current one and a new one (at least 12 characters). \""," + \"Changing it — or an admin setting it for you — signs that account out on every other \""," + \"device; the device you changed it on stays signed in. An already-open session elsewhere can linger \""," + \"for a few minutes before it stops working.\","," // Adding & correcting"," dialogsHeading: \"Adding & correcting\","," \"Adding and correcting happen in a popup. Look for the New … button beside the \""," + \"screen's title — new grade, product, customer, flock, item, user, order. Each row's \""," + \"edit or correct link opens the same popup with that row's values \""," + \"already filled in.\","," \"Drill-downs work the same way. Open a flock's birds ledger to record a cull, an \""," + \"inventory item to record a purchase, feed usage, or a stock correction, an order to record a \""," + \"payment, or a worker's flocks to manage their access — the ledger stays \""," + \"where it is and the form comes to you.\","," \"Cancel, Escape, or a click outside closes the popup, records nothing, and clears \""," + \"what you typed — reopen it and you start from a blank form. If a save fails, the popup stays open \""," + \"with your values and the reason, so you can fix it and try again — retrying is safe, it never \""," + \"records the same thing twice.\","," \"The screens whose whole job is capture keep their form on the page: Daily entry, \""," + \"Water, recording an expense, and adding lines to a draft order. Those you use every \""," + \"day — no extra click.\","," \"Whole-number counts — egg counts, bird counts, sale quantities, eggs per unit — have thumb-sized \""," + \"− and + buttons: tap for one, hold to speed up. \""," + \"A sale line's quantity never steps below 1. Prices and fractional amounts are still typed.\","," \"Actions that cannot be undone ask first. Submitting a day, confirming or cancelling \""," + \"an order, depleting or archiving a flock — each one says what is about to happen and waits. The \""," + \"keyboard starts on Cancel, so pressing Enter by habit never goes through with it. A \""," + \"red button means the action undoes or retires something: voiding, cancelling a \""," + \"draft, depleting, archiving. Submitting a day and confirming an order cannot be taken back either, \""," + \"but they are the normal way through the week.\","," \"Voids need a reason. Voiding a daily entry, a payment, or a confirmed order asks the \""," + \"same way but wants a written reason first — it is stored with the void and shown wherever that \""," + \"record turns up afterwards, so write what actually happened. Leave it empty and the popup says so on \""," + \"the spot, keeping whatever you typed.\","," // Daily entry"," dailyEntryHeading: \"Daily entry\","," \"Pick the flock and date at the top, then work through two panes side by side: 1 Egg \""," + \"counts (total, cracked, dirty, discarded, deaths) and 2 Grading. The counts \""," + \"produce a sellable figure, and that is the number the grades have to add up to — \""," + \"they can never exceed it.\","," \"Grading counts down. Beside the grades is how many sellable eggs you still have to \""," + \"place; it turns green the moment the day adds up and red if you go over. You cannot submit while it \""," + \"is over.\","," \"Every count has − and + buttons. Tap for one, or hold \""," + \"— it speeds up as you go, so a few hundred eggs takes about a second. Easier than a keypad with \""," + \"gloves on. A grade's + stops once the day is fully graded, so you cannot overshoot \""," + \"with it.\","," \"Most days end the same way — one grade takes whatever is left. Put all in… beside the \""," + \"remaining count does it in one move: drag it onto a grade, or tap it and pick one.\","," \"Both save buttons stay in a bar at the bottom of the screen as you scroll. On a phone that bar also \""," + \"shows the sellable count and how many are left, so you never lose sight of whether the day adds up.\","," \"Save draft keeps the day editable. Submit makes it official: it \""," + \"creates the day's egg lots and records deaths in the flock's bird ledger. Workers can no longer edit \""," + \"it — an admin can adjust or void it (see \\\"Fixing mistakes\\\").\","," \"Submitted entries lock automatically after 7 days. Locked only means the correction \""," + \"window for routine fixes has passed — admin adjust/void still works on locked entries.\","," \"\\\"Today\\\" means your farm's today, not the clock in some other part of the world. You \""," + \"can record any day up to and including it; a day that has not happened yet on the farm is refused — \""," + \"here and everywhere else you enter a date: feed and water use, feed purchases and stock corrections, \""," + \"expenses, payments, and a flock's placement date. The same date decides when eggs come out of a \""," + \"withdrawal period, which eggs a sale can take, the day a flock is depleted or archived on, and the \""," + \"range reports open on — so nothing disagrees about what day it is.\","," \"One entry per flock per day. Reopening a day that has a draft loads it for editing and shows an \""," + \"Editing draft badge beside the title, so picking up saved work never looks like \""," + \"starting fresh. If prefill fails, saving is blocked until it succeeds so an existing draft is never \""," + \"silently overwritten.\","," \"Depleted flocks accept backfilled entries up to their depletion date; archived flocks accept none.\","," // Flocks & birds"," flocksHeading: \"Flocks & birds\","," \"A flock's current birds = its starting count minus everything in its bird \""," + \"ledger: deaths (added automatically when entries are submitted), culls \""," + \"(birds deliberately removed — sold, slaughtered, given away), and manual adjustments \""," + \"(count corrections, either direction).\","," \"Lifecycle: Active (normal) → Depleted (birds gone; history stays, \""," + \"backfill allowed) → Archived (hidden from daily work). Depleting and archiving ask \""," + \"for confirmation; both are reversible with Reactivate.\","," \"Anyone can create a flock and view the bird ledger. Editing a flock, lifecycle changes, and recording \""," + \"culls/adjustments are admin-only.\","," // Egg grades"," gradesHeading: \"Egg grades\","," \"Grades are your farm's grading buckets — sizes (Large…), qualities (Cracked…), or custom. Only \""," + \"saleable grades appear in entry capture and on orders; non-saleable buckets are \""," + \"bookkeeping.\","," \"Grades are never deleted. Deactivating removes a grade from capture and order \""," + \"pickers: its stock stays counted and order lines added earlier can still confirm, but it can't be \""," + \"put on new order lines — reactivate the grade to sell remaining stock. History keeps \""," + \"showing its name.\","," gradesAdminOnly: \"The grade catalog is configuration — managing it is admin-only.\","," // Products"," productsHeading: \"Products (admin)\","," \"Products are what you sell — \\\"Large Eggs by the dozen\\\", \\\"Mixed carton\\\". Each egg product points \""," + \"at an egg grade (that's where its stock comes from) and carries a selling unit and an optional \""," + \"default price. Only egg products exist for now.\","," \"Packed units set how many eggs each unit holds — your carton might be 12, 18, or 30. \""," + \"Changing a unit only affects future sales; past orders keep the count they were sold with.\","," // Stock"," \"Every grade expands into its lots (one per submitted day), and every lot into its \""," + \"movement ledger — an explicit line for each production, sale, correction, or void. \""," + \"The running sum always equals the balance shown; nothing changes stock without leaving a line.\","," \"Stock is the sum of your egg lots per grade. The restricted column is reserved for \""," + \"medication withholding periods — that feature arrives with medication tracking. Nothing \""," + \"marks eggs restricted yet, so the system does not enforce withdrawal times today — manage \""," + \"withholding periods outside Cluckwork for now.\","," stockFifo: \"Selling always takes the oldest lots first, so stock naturally rotates.\","," // Feed & inventory"," inventoryHeading: \"Feed & inventory\","," \"Items define what you track (feed, supplements…) and the unit it's measured in. The \""," + \"unit locks once stock has been received — quantities on record must keep meaning what they meant.\","," \"Record purchase books received stock as a dated lot with its cost. Record \""," + \"usage logs what a flock ate on a day: it draws from the oldest lots first (only lots that \""," + \"existed on that date) and estimates the cost from the actual lots consumed.\","," \"Every change lands in the item's movement ledger — purchases, usage, corrections. \""," + \"Ledger rows are never edited or deleted.\","," \"Typos and spoilage are fixed with corrections: an Adjustment (either \""," + \"direction) or a Discard (write-off) against a specific lot, always with a reason. The \""," + \"original row and the correction both stay visible.\","," \"Recording purchases and usage is open to everyone; the item catalog and stock corrections are \""," + \"admin-only.\","," // Water"," waterHeading: \"Water\","," \"Record what each flock drank per day: either a direct amount (liters or gallons) or meter \""," + \"readings — the amount is then the meter delta (end − start).\","," \"Water records have no stock behind them, so mistakes are fixed by correcting the record \""," + \"directly (the \\\"correct\\\" button, admin-only) — no compensating entries. The flock and date \""," + \"are fixed: picked wrong, record it again under the right one.\","," \"Same lifecycle rule as everywhere: depleted flocks accept backfill up to their depletion date, \""," + \"archived flocks accept nothing.\","," // Customers & sales"," salesHeading: \"Customers & sales\","," \"Orders start as drafts: add lines by picking a product, a packed \""," + \"unit (dozen, carton, …), a quantity, and a price per unit (prefilled from the product's default) — \""," + \"edit freely, or cancel (the draft is kept, read-only). Each line remembers how many \""," + \"eggs its unit held when it was added, so redefining a carton later never changes old orders.\","," \"Confirming an order allocates real stock — oldest lots first — and is the point \""," + \"where inventory changes hands.\","," \"A mistaken confirm is undone with Void (admin-only, reason required): the eggs go \""," + \"back to the exact lots they came from, and the order stays listed as Voided. Voiding is for \""," + \"mistakes, not for returns of delivered goods. (Orders confirmed before lot-level allocation tracking \""," + \"existed can't self-serve void — ask your administrator.)\","," \"Payments (Sales, Manager, or admin — voiding a payment is admin/manager only): a \""," + \"confirmed order's panel shows its settlement history — record partial payments (date, amount, \""," + \"method, optional reference) until the outstanding amount reaches zero; overpaying is refused. A \""," + \"wrong payment is voided (reason required) and the outstanding grows back. An order \""," + \"with payments can't be voided until its payments are voided first. The Customers page shows each \""," + \"customer's outstanding balance.\","," // Reports"," reportsHeading: \"Reports\","," \"Production (everyone): pick a date range — per-day eggs, losses, sellable, deaths, \""," + \"and hen-day % (eggs collected ÷ birds alive that day × 100), with period totals and \""," + \"a by-grade breakdown. Draft and voided entries don't count.\","," \"Money (admin): sales summary for the range's orders (revenue / paid / outstanding), \""," + \"expenses by category, and basic profit — confirmed revenue minus recorded expenses, \""," + \"no cost-of-goods.\","," // Expenses"," expensesHeading: \"Expenses (admin)\","," \"Record money going out: date, category, description, and amount (in the farm's currency), optionally \""," + \"tied to a flock. The month picker shows a running total; categories are managed on the same screen \""," + \"(deactivating one hides it from new expenses — recorded ones keep it).\","," \"Corrections edit the expense in place (correct on the row). If someone else \""," + \"corrected it first, the form reloads their values and asks you to re-apply. The currency an expense \""," + \"was recorded in never changes.\","," \"Expenses are money data, so the whole screen — viewing included — is admin-only, unlike the \""," + \"production screens where workers record.\","," // History"," \"Browse recorded daily entries newest-first, filtered by flock and date range. The status column shows \""," + \"the entry's life: Draft, Submitted, Locked (7+ days old), Adjusted (hover for the reason), or \""," + \"Voided.\","," \"Admins correct from here: adjust opens the entry's numbers for editing (reason \""," + \"required), void undoes the whole entry. Stock and the bird ledger follow \""," + \"automatically.\","," \"Draft rows have an edit link (everyone, not just admins) that jumps back to the \""," + \"Daily entry screen with that flock and day loaded — drafts are edited there, not adjusted.\","," // Audit log"," auditHeading: \"Audit log (admin)\","," \"Every corrective, destructive, or configuration change lands in the audit log automatically: who did \""," + \"it, when (UTC), what it touched, and the reason where one was given. Written together with the \""," + \"change itself — a failed action leaves no trace, a successful one always does — and never editable, \""," + \"by anyone.\","," // Export & backup"," exportHeading: \"Export & backup (admin)\","," \"The Export screen downloads your data as CSV files you can open in any spreadsheet — one dataset at a \""," + \"time, or everything at once as a zip (the full backup, with a manifest of row \""," + \"counts). Keep a copy somewhere safe on your own schedule; automatic scheduled backups come in a \""," + \"later phase.\","," \"Money columns hold minor units (cents) plus the currency — exact values, not display formatting. \""," + \"Dates are ISO (YYYY-MM-DD), and timestamps are UTC.\","," // Farm settings"," farmSettingsHeading: \"Farm settings (admin)\","," \"Setup → Farm settings holds the farm's name and the four things that decide how \""," + \"everything reads: timezone, locale, currency and \""," + \"unit system. First day of week and the date and time formats are optional — leave \""," + \"them blank and the locale decides. The timezone takes effect everywhere the moment it is saved; the \""," + \"rest are recorded against the farm and will drive how amounts, dates and measurements are displayed \""," + \"once that formatting lands.\","," \"The timezone is the farm's day. Every field that records when something \""," + \"happened — daily entry, flocks, water, feed usage and purchases, expenses, orders and payments \""," + \"— opens on it and refuses to go past it, whatever day the phone or laptop in your hand is on, so a \""," + \"device travelling ahead of the farm can no longer offer a date the save then refuses. Dates that are \""," + \"meant to be in the future are not capped: a feed batch's expiry, and the date \""," + \"ranges you filter History and Water by.\","," \"The currency locks the moment the farm records its first amount — a sale, a payment, \""," + \"an expense, a priced product, or money spent on feed. The field shows as locked with the reason \""," + \"rather than letting you type a code that would be refused. Nothing already recorded is ever \""," + \"re-priced, which is exactly why it locks.\","," \"The logo replaces the Cluckwork mark in the sidebar for everyone at the farm. PNG, \""," + \"JPEG or WebP, up to the size limit shown on the screen (2 MB by default) and 4096 pixels a side. \""," + \"Animated images are refused rather than flattened. What gets stored is a rebuilt copy: camera and \""," + \"location details are stripped out on the way in — a photo taken on a phone carries where it was \""," + \"taken, and for a farm that is its address. Remove it and the sidebar goes back to the Cluckwork mark.\","," \"Use a square logo. It shows small in the sidebar, so a simple, tightly-cropped mark \""," + \"— a symbol or a single letter — reads much better there than a wide wordmark or a detailed picture, \""," + \"which shrink to something unreadable. Keep a detailed logo for print or a website; give the app a \""," + \"clean little mark.\","," // Farm palette"," farmPaletteHeading: \"Farm palette\","," \"Farm settings lets an admin pick the accent colour used across the app for everyone on the farm: \""," + \"Aubergine, Forest, Slate or Terracotta. The choice applies when you save, and everyone sees it the \""," + \"next time their app loads.\","," \"Light and night mode are separate and personal. Each person picks their own with the toggle in the \""," + \"sidebar, on each device, and the farm palette never overrides it — every palette is designed to work \""," + \"in both.\","," // Install on a phone"," installHeading: \"Install on a phone\","," \"Cluckwork can be added to a phone or tablet's home screen, where it gets its own icon and opens in \""," + \"its own window without the browser bars — more room for the entry screens and quicker to reach in \""," + \"the shed. It's the same app, not a separate download, so there is nothing to update from an app \""," + \"store.\","," \"Android (Chrome): open the menu and choose Install app or \""," + \"Add to Home screen. iPhone/iPad (Safari): tap Share, \""," + \"then Add to Home Screen.\","," \"Installing is only offered over a secure (https) address. If your farm reaches \""," + \"Cluckwork on a plain http one the option simply won't appear — nothing is broken, \""," + \"and the app works exactly as it does in the browser.\","," \"Installing does not make the app work offline. It still needs a connection to load \""," + \"and save; only the app's own screens are kept on the device so it starts quickly. Recording while \""," + \"offline is planned work, not something installing turns on.\","," \"When a new version is released you'll see \\\"A new version of Cluckwork is ready\\\". \""," + \"It waits for you rather than reloading while you're typing — press Reload when \""," + \"you're at a good moment, or Later and it will ask again next time. Nothing is lost \""," + \"by leaving it.\","," // Fixing mistakes (table cells are prose, part of 6a)"," mistakesHeading: \"Fixing mistakes\","," \"Every fix in this table needs an admin sign-in (see \\\"Who can do what\\\") — workers record, admins \""," + \"correct. The one exception: a draft is still recording, not correcting, so workers edit \""," + \"their own drafts.\","," mistakesTableMistakeHeader: \"Mistake\","," mistakesTableFixHeader: \"Fix\","," mistakesRow1Mistake: \"Depleted or archived the wrong flock\","," mistakesRow1Fix: \"Flocks → Reactivate (fully reversible)\","," mistakesRow2Mistake: \"Wrong bird count\","," mistakesRow2Fix: \"Flocks → bird ledger → Adjustment (either direction)\","," mistakesRow3Mistake: \"Confirmed the wrong sales order\","," \"Sales → open the order → Void order (stock returns to its lots; reason required). \""," + \"If payments were recorded on it, void those first.\","," mistakesRow4Mistake: \"Recorded a wrong payment\","," \"Sales → open the order → payments → void (reason required): the row is kept and the \""," + \"outstanding amount grows back.\","," mistakesRow5Mistake: \"Wrong quantity in a feed purchase / spoiled feed\","," \"Inventory → open the item → Correct stock (Adjustment or Discard against the lot; \""," + \"reason required). Only quantities are correctable — a wrong cost, date, or lot number can't be \""," + \"fixed yet, so double-check those before saving.\","," mistakesRow6Mistake: \"Over- or under-recorded feed usage\","," \"Same correction form: a positive Adjustment returns over-used stock to the lot (up to what it \""," + \"received); a negative one removes under-recorded stock. The usage record itself and its cost \""," + \"estimate stay as recorded — corrections fix the stock, not the history.\","," mistakesRow7Mistake: \"Wrong water record\","," \"Water → correct on the record — amounts, source, meters, and note edit in place (no \""," + \"stock behind water). Flock and date are fixed: picked wrong, record it again under the right one.\","," mistakesRow8Mistake: \"Wrong numbers in a submitted daily entry\","," \"History → adjust (admin) — totals, losses, mortality, and grade split, with a \""," + \"required reason. Stock and the bird ledger update to match automatically, but eggs already sold can \""," + \"never be un-counted: shrinking a grade below what was sold is refused. The previous values stay \""," + \"visible on the entry.\","," mistakesRow9Mistake: \"Entire submitted entry is wrong (wrong flock or day)\","," \"History → void (admin, reason required): its egg lots empty, its deaths are \""," + \"reversed in the bird ledger, and the entry is kept as Voided. Refused if any of its eggs were \""," + \"already sold — void the sale first. Voiding frees the day: the correct entry can then be recorded \""," + \"for the same flock and date.\","," mistakesRow10Mistake: \"Mistake in a draft entry or order\","," \"Edit it — draft numbers, grade lines, and order lines are all editable (draft entries: History → \""," + \"edit jumps to the Daily entry screen with the day loaded). The flock/date of an \""," + \"entry and the customer/date of an order are fixed, though: picked wrong, just record it again under \""," + \"the right one (and cancel the wrong draft order).\","," // Glossary (Task 33, B6b, #182): the 37-row term/definition table plus"," // its closing repo-note paragraph. Externalized byte-faithful from the"," // prior hardcoded English — see the Task 33 brief's alignment note:"," // specs/product/GLOSSARY.md is the canonical 96-term termbase (Task 34"," // reconciles it separately) and this in-app table is a curated subset,"," // so its English wording is intentionally NOT rewritten here. HTML"," // entities in the old JSX ('/") are real apostrophe/quote"," // characters below — same rendered text, just no entity escaping needed"," // inside a JS string. -only rows: glossaryInstallToHomeScreenDef"," // (one ) and glossaryRepoNote (one , whose"," // \"specs/product/GLOSSARY.md\" path text is literal — the closing note's"," // renders it via the components map, not a translated string)."," \"Screens live in the left sidebar on a computer; on a phone the four you use most are tabs across \""," + \"the bottom, the rest under More.\","," glossaryOperationalDayTerm: \"Operational day\","," \"Dates mean your farm's calendar day, worked out from the farm's own timezone rather than a clock \""," + \"somewhere else. It is the same \\\"today\\\" everywhere: what counts as a future date when you record \""," + \"work, when eggs leave a withdrawal period, which eggs a sale can take, the day a flock is depleted \""," + \"or archived on, and the range reports open on. Every field that records WHEN SOMETHING HAPPENED \""," + \"opens on it and will not go past it, whatever day the device in your hand is on. Dates meant to \""," + \"fall in the future are not capped — a feed batch's expiry, and the History and Water filters.\","," glossaryInstallToHomeScreenTerm: \"Install to home screen\","," \"Adding Cluckwork to a phone or tablet's home screen from the browser, so it gets its own icon and \""," + \"opens in its own window without the browser bars. It is the same app, not a separate download — \""," + \"nothing to update from an app store. Only offered over a secure (https) address, and it does \""," + \"not make the app work offline: it still needs a connection to load and save.\","," glossaryNewVersionReadyTerm: \"A new version is ready\","," \"After a release, an installed app notices the new version in the background and asks before \""," + \"switching, rather than reloading while you are typing. Press Reload when convenient, or Later and \""," + \"it asks again next time. Nothing is lost by leaving it — the running app keeps working until you \""," + \"accept.\","," glossaryTooManySignInAttemptsTerm: \"Too many sign-in attempts\","," \"Sign-in is rate limited to slow password guessing: too many attempts from one place in a few \""," + \"minutes are refused with this message until a short cool-off passes. It never affects an already \""," + \"signed-in session.\","," // #308"," glossaryStepUpAuthTerm: \"Step-up authentication\","," \"An extra check on top of being signed in: before creating another Owner or resetting an existing \""," + \"Owner's password, the Users screen asks you to re-enter your current password right there in the \""," + \"dialog. It confirms it's really you before handing out that much access — every other action on \""," + \"that screen does not ask again.\","," glossarySomethingWentWrongScreenTerm: \"\\\"Something went wrong\\\" screen\","," \"What a screen shows when it hits an error, instead of going blank. Saved data is safe — anything \""," + \"you were still typing may need re-entering; tap Reload or Back to the dashboard. \\\"Error \""," + \"details\\\" holds the message for a screenshot.\","," glossaryDailyEntryTerm: \"Daily entry\","," glossaryDailyEntryDef: \"One flock's day: eggs by grade, losses, deaths. Draft until submitted.\","," glossaryEggLotTerm: \"Egg lot\","," \"A dated batch of sellable eggs of one grade, created by submitting an entry. Stock is the sum of \""," + \"lots.\","," glossaryGradeTerm: \"Grade\","," glossaryGradeDef: \"A grading bucket (size, quality, or custom). Saleable grades can be sold.\","," glossaryEggMovementLedgerTerm: \"Egg movement ledger\","," \"The line-by-line history behind an egg lot's balance: production in, sales out, corrections and \""," + \"voids signed accordingly.\","," glossaryFifoDef: \"\\\"First in, first out\\\" — sales and feed usage always take the oldest stock first.\","," glossaryCullDef: \"Birds deliberately removed from a flock (sold, slaughtered, given away) — not deaths.\","," glossaryMortalityDef: \"Deaths, recorded on the daily entry; lands in the bird ledger automatically at submit.\","," glossaryDepleteDef: \"Mark a flock as having no birds left. History stays; reversible via Reactivate.\","," glossaryArchiveDef: \"Hide a finished flock from daily work. Reversible via Reactivate.\","," \"A hold on eggs during a medication withholding period. Coming with medication tracking — nothing \""," + \"sets restrictions yet, so manage withholding periods outside Cluckwork for now.\","," glossaryProductTerm: \"Product\","," \"What you sell — an egg product points at a grade (its stock source) and carries a selling unit and \""," + \"default price.\","," \"How many eggs a dozen/tray/carton/case holds on your farm. Each sale line keeps the count it was \""," glossarySalesLineTerm: \"Sales line\","," \"One product on an order: quantity in selling units, priced per unit; the eggs behind it are \""," + \"quantity × the unit's egg count.\","," glossaryConfirmOrderTerm: \"Confirm (order)\","," glossaryConfirmOrderDef: \"Turns a draft order into a real sale and allocates stock. Undone only by voiding.\","," glossaryVoidOrderTerm: \"Void (order)\","," \"Undo of a mistaken confirm — stock returns to the exact lots it came from. Needs a reason.\","," glossaryCancelOrderTerm: \"Cancel (order)\","," glossaryCancelOrderDef: \"Close a draft that never happened. No stock involved.\","," glossaryInventoryItemTerm: \"Inventory item\","," \"A catalog entry for something you stock (feed, supplements…), with a fixed unit of measure.\","," glossaryInventoryLotTerm: \"Inventory lot\","," glossaryInventoryLotDef: \"One received batch of an item, with its own cost. On-hand = sum of lots.\","," glossaryInventoryMovementLedgerTerm: \"Inventory movement ledger\","," \"The append-only trail of every feed/supply stock change. Corrections are new rows, never edits.\","," glossaryWaterUsageTerm: \"Water usage\","," \"What a flock drank on a day — direct amount or meter delta. Editable in place; flock/date fixed.\","," glossaryFeedUsageTerm: \"Feed usage\","," glossaryFeedUsageDef: \"What a flock ate on a day; drains lots FIFO and estimates cost from them.\","," \"Stock corrections against a lot, reason required. Discard = write-off (spoilage).\","," \"Admin (owner), Manager, Worker, Sales, Read-only — see \\\"Who can do what\\\". Workers record; \""," + \"managers also correct and configure; sales handles orders and payments; read-only just views.\","," glossaryLockedEntryTerm: \"Locked (entry)\","," \"A submitted entry older than 7 days — closed to routine edits; admin adjust/void still works.\","," glossaryAdjustEntryTerm: \"Adjust (entry)\","," \"Admin correction of a submitted entry. Stock and bird ledger reconcile automatically; sold eggs are \""," + \"untouchable; previous values stay visible.\","," glossaryVoidEntryTerm: \"Void (entry)\","," \"Admin undo of a whole submitted entry — lots empty, deaths reverse, entry preserved as Voided. \""," + \"Refused once its eggs are sold.\","," glossaryFarmSettingsTerm: \"Farm settings\","," \"The farm's name, timezone, locale, currency and unit system, plus optional first day of week and \""," + \"date/time formats. Setup → Farm settings; owners and managers edit, everyone reads — formatting \""," + \"money and dates is not a permission.\","," \"The farm currency stops being editable once anything has recorded an amount in it — a sale, a \""," + \"payment, an expense, a priced product, money spent on feed. The field shows locked with the \""," + \"reason. Nothing already recorded is ever re-priced, which is the whole point.\","," glossaryFarmLogoTerm: \"Farm logo\","," \"Your own image in place of the Cluckwork mark in the sidebar, uploaded from Farm settings. PNG, \""," + \"JPEG or WebP (2 MB by default), still images only; a square, simple mark reads best at the small \""," + \"sidebar size. Stored as a rebuilt copy with camera and location details stripped out.\","," glossaryFarmPaletteTerm: \"Farm palette\","," \"The farm-wide accent colour, chosen by an admin in Farm settings. Separate from each person's own \""," + \"light/night mode setting.\","," glossaryUiLanguageTerm: \"UI language\","," \"The per-user language the interface is shown in — English, Español, or Tagalog — chosen from \""," + \"Account → Preferences. English is the fallback for any screen not yet translated, whatever \""," + \"language you picked.\","," \"Full spec-language definitions live in the repository's specs/product/GLOSSARY.md.\",","export type Resources = typeof en;","web/src/routes/HelpPage.tsx",[6148],{"_787":788,"_789":6149,"_410":6150,"_792":62},550,[6151,6152,202,6153,6154,6155,6156,6157,202,6158,6159,1005,6160,6161,6162,6163,6164,6165,6166,6167,6168,6169,6170,6171,6172,6173,6174,6175,6176,6177,6178,6179,6180,6181,6182,6183,6184,6185,6186,6187,6188,6189,202,6190,6191,6192,6193,6194,202,6195,6196,202,6197,6198,6199,6200,6201,6202,6203,6204,6205,6206,936,6207,6208,937,6209,6210,6211,849,6212,6213,202,6214,6215,6216,6217,6218,6219,6220,202,6221,6222,6223,6224,6225,6226,6227,6228,6229,6230,6231,6232,6233,6234,6235,6236,6237,6238,202,6239,6240,6241,6242,6243,6244,6242,6245,6244,6242,6246,6244,6247,202,6248,6241,6242,6249,6244,6242,6250,6244,6242,6251,6244,6242,6252,6244,6242,6253,6244,6247,202,6254,6255,6256,202,6257,6254,6258,6256,6259,202,6260,6241,6242,6261,6244,6242,6262,6244,6242,6263,6244,6242,6264,6244,6247,202,6254,6265,6256,202,6266,6241,6242,6267,6244,6242,6268,6244,6242,6269,6244,6242,6270,6271,6272,6244,6242,6273,6244,6242,6274,6275,6244,6242,6276,6244,6242,6277,6244,6247,202,6278,6241,6242,6279,6244,6242,6280,6244,6242,6281,6244,6242,6282,6244,6283,6242,6284,6244,6242,6285,6244,6242,6286,6244,6242,6287,6244,6288,6247,202,6289,6241,6242,6290,6244,6242,6291,6244,6292,6247,202,6293,6241,6242,6294,6244,6242,6295,6244,6296,6247,202,6297,6241,6298,6242,6299,6244,6247,202,6300,6241,6242,6301,6244,6242,6302,6244,6303,6247,202,6304,6241,6242,6305,6244,6242,6306,6244,6242,6307,6244,6242,6308,6244,6309,6247,202,6310,6241,6242,6311,6244,6242,6312,6244,6313,6247,202,6314,6241,6242,6315,6244,6242,6316,6244,6242,6317,6244,6242,6318,6244,6247,202,6319,6241,6242,6320,6244,6242,6321,6244,6247,202,6322,6241,6323,6242,6324,6244,6325,6247,202,6326,6241,6327,6242,6328,6244,6242,6329,6244,6247,202,6330,6241,6331,6247,202,6332,6241,6242,6333,6244,6334,6247,202,6335,6241,6242,6336,6244,6242,6337,6244,6242,6338,6244,6242,6339,6244,6242,6340,6244,6247,202,6341,6342,6343,202,6344,6241,6345,6242,6346,6244,6242,6347,6244,6242,6348,6244,6242,6349,6244,6247,202,6350,6351,6352,6256,6353,6354,6355,6356,6357,6358,6359,6360,6361,6358,6362,6363,6361,6358,6364,6365,6366,6367,6361,6358,6368,6365,6369,6367,6361,6358,6370,6365,6371,6367,6361,6358,6372,6373,6361,6358,6374,6365,6375,6367,6361,6358,6376,6365,6377,6367,6361,6358,6378,6365,6379,6367,6361,6358,6380,6365,6381,6367,6361,6382,6383,202,6384,6353,6357,6385,6386,6387,6388,6389,6390,6391,6392,6393,6394,6395,6396,6397,6398,6399,6400,6401,6402,6403,6404,6405,6406,6407,6408,6409,6410,6411,6412,6413,6414,6415,6416,6417,6418,6419,6420,6421,6422,6423,6424,6425,6426,6427,6428,6429,6430,6431,6432,6433,6434,6435,6436,6437,6438,6439,6440,6441,6442,6443,6444,6445,6446,6447,6448,6449,6450,6451,6452,6453,6454,6455,6456,6358,6457,6458,6361,6459,6460,6382,6383,202,6461,6462,6463,6464,6220,6465,6466,6467],"import { useEffect, useState } from \"react\";","import { Trans, useTranslation } from \"react-i18next\";","// F18 (#71): in-app user guide + glossary. #52 restyled it into a docs layout","// with a sticky contents rail that scroll-spies the section in view. KEEP THIS","// PAGE CURRENT: the docs-sync rule (AGENTS.md) requires every user-visible","// change to update the relevant section here and specs/product/GLOSSARY.md in","// the same PR.","// Must mirror the sections below, in document order — a section","// missing here is invisible to anyone who navigates by the contents list.","// Task 32 (B6a, #182): the label (2nd element) is now a `help` catalog key,","// not literal text — rendered via t(label) at render time. The `id` (1st","// element) stays byte-identical: it drives the anchors below AND","// the scroll-spy IntersectionObserver in the effect further down. Do NOT","// rename an id or reorder an entry — that would break both.","const TOC = ["," [\"getting-around\", \"tocGettingAround\"],"," [\"signing-in\", \"tocSigningIn\"],"," [\"daily-loop\", \"tocDailyLoop\"],"," [\"roles\", \"tocRoles\"],"," [\"dialogs\", \"tocDialogs\"],"," [\"daily-entry\", \"tocDailyEntry\"],"," [\"flocks\", \"tocFlocks\"],"," [\"grades\", \"tocGrades\"],"," [\"products\", \"tocProducts\"],"," [\"stock\", \"tocStock\"],"," [\"inventory\", \"tocInventory\"],"," [\"water\", \"tocWater\"],"," [\"sales\", \"tocSales\"],"," [\"reports\", \"tocReports\"],"," [\"expenses\", \"tocExpenses\"],"," [\"history\", \"tocHistory\"],"," [\"audit\", \"tocAudit\"],"," [\"export\", \"tocExport\"],"," [\"farm-settings\", \"tocFarmSettings\"],"," [\"farm-palette\", \"tocFarmPalette\"],"," [\"install\", \"tocInstall\"],"," [\"mistakes\", \"tocMistakes\"],"," [\"glossary\", \"tocGlossary\"],","] as const;","export function HelpPage() {"," const { t } = useTranslation(\"help\");"," // The busy-button line (#236) reads the same `common` key as the"," // \"Working…\" announcement it explains, so the two can never drift."," const { t: tc } = useTranslation(\"common\");"," // Scroll-spy the contents rail: highlight the section currently in view."," const [activeId, setActiveId] = useState(TOC[0][0]);"," useEffect(() => {"," // jsdom (tests) has no IntersectionObserver — the rail still works as plain"," // anchors, it just doesn't auto-highlight there."," if (typeof IntersectionObserver === \"undefined\") return;"," const observer = new IntersectionObserver("," (entries) => {"," const inView = entries"," .filter((e) => e.isIntersecting)"," .sort((a, b) => a.boundingClientRect.top - b.boundingClientRect.top);"," if (inView[0]) setActiveId(inView[0].target.id);"," // \"active\" once a heading reaches the top ~30% of the viewport"," { rootMargin: \"0px 0px -70% 0px\", threshold: 0 },"," for (const [id] of TOC) {"," const el = document.getElementById(id);"," if (el) observer.observe(el);"," return () => observer.disconnect();"," }, []);"," return ("," "," "," {t(\"eyebrow\")} "," {t(\"heading\")} "," {t(\"lead\")} "," "," "," "," {t(\"contentsEyebrow\")} "," "," {TOC.map(([id, labelKey]) => ("," "," setActiveId(id)}"," >"," {t(labelKey)}"," "," "," ))}"," "," "," "," {t(\"gettingAroundHeading\")} "," "," "," }} />"," "," }} />"," }} />"," "," {t(\"signingInHeading\")} "," }} />"," , em: }} />"," , em: }} />"," }} />"," }} />"," "," }} />"," "," {t(\"dailyLoopHeading\")} "," }} />"," {t(\"dailyLoopSummary\")} "," {t(\"rolesHeading\")} "," }} />"," }} />"," }} />"," }} />"," , em: }} />"," {t(\"dialogsHeading\")} "," }} />"," }} />"," }} />"," {/* #236 — the pending-save indicator, in the section that already"," explains save/retry behaviour. /}"," {tc(\"workingHint\")}"," }} />"," {/ #250 — the −/+ steppers rolled out beyond daily entry. /}"," }} />"," }} />"," }} />"," {t(\"dailyEntryHeading\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"dailyEntrySaveBar\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"dailyEntryDepletedBackfill\")} "," {t(\"flocksHeading\")} "," }} />"," }} />"," {t(\"flocksPermissions\")} "," {t(\"gradesHeading\")} "," }} />"," , em: }} />"," {t(\"gradesAdminOnly\")} "," {t(\"productsHeading\")} "," {t(\"productsWhatYouSell\")} "," }} />"," {t(\"stockHeading\")} "," }} />"," }} />"," {t(\"stockFifo\")} "," {t(\"inventoryHeading\")} "," }} />"," }} />"," }} />"," , em: }} />"," {t(\"inventoryPermissions\")} "," {t(\"waterHeading\")} "," }} />"," }} />"," {t(\"waterLifecycle\")} "," {t(\"salesHeading\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"reportsHeading\")} "," }} />"," }} />"," {t(\"expensesHeading\")} "," {t(\"expensesRecording\")} "," }} />"," {t(\"expensesAdminOnly\")} "," {t(\"historyHeading\")} "," {t(\"historyBrowse\")} "," }} />"," }} />"," {t(\"auditHeading\")} "," {t(\"auditLog\")} "," {t(\"exportHeading\")} "," }} />"," {t(\"exportFormats\")} "," {t(\"farmSettingsHeading\")} "," }} />"," , em: }} />"," }} />"," }} />"," }} />"," {t(\"farmPaletteHeading\")} "," {t(\"farmPaletteIntro\")} "," {t(\"farmPaletteLightNight\")} "," {t(\"installHeading\")} "," {t(\"installIntro\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"mistakesHeading\")} "," "," }} />"," "," "," "," "," "," "," "," "," "," "," "," "," "," "," }} />"," "," }} />"," "," "," "," }} />"," "," }} />"," "," }} />"," "," }} />"," "," {t(\"mistakesTableMistakeHeader\")} {t(\"mistakesTableFixHeader\")} {t(\"mistakesRow1Mistake\")} }} /> {t(\"mistakesRow2Mistake\")} }} /> {t(\"mistakesRow3Mistake\")} "," }} />"," {t(\"mistakesRow4Mistake\")} }} /> {t(\"mistakesRow6Mistake\")} {t(\"mistakesRow6Fix\")} {t(\"mistakesRow7Mistake\")} }} /> }} /> }} /> "," {t(\"glossaryHeading\")} "," {t(\"glossaryNavigationTerm\")}"," {t(\"glossaryNavigationDef\")}"," {t(\"glossaryOperationalDayTerm\")}"," {t(\"glossaryOperationalDayDef\")}"," {t(\"glossaryInstallToHomeScreenTerm\")}"," }} />"," {t(\"glossaryNewVersionReadyTerm\")}"," {t(\"glossaryNewVersionReadyDef\")}"," {t(\"glossaryTooManySignInAttemptsTerm\")}"," {t(\"glossaryTooManySignInAttemptsDef\")}"," {t(\"glossaryStepUpAuthTerm\")}"," {t(\"glossaryStepUpAuthDef\")}"," {t(\"glossarySomethingWentWrongScreenTerm\")}"," {t(\"glossarySomethingWentWrongScreenDef\")}"," {t(\"glossaryDailyEntryTerm\")}"," {t(\"glossaryDailyEntryDef\")}"," {t(\"glossaryEggLotTerm\")}"," {t(\"glossaryEggLotDef\")}"," {t(\"glossaryGradeTerm\")}"," {t(\"glossaryGradeDef\")}"," {t(\"glossaryEggMovementLedgerTerm\")}"," {t(\"glossaryEggMovementLedgerDef\")}"," {t(\"glossaryFifoTerm\")}"," {t(\"glossaryFifoDef\")}"," {t(\"glossaryCullTerm\")}"," {t(\"glossaryCullDef\")}"," {t(\"glossaryMortalityTerm\")}"," {t(\"glossaryMortalityDef\")}"," {t(\"glossaryDepleteTerm\")}"," {t(\"glossaryDepleteDef\")}"," {t(\"glossaryArchiveTerm\")}"," {t(\"glossaryArchiveDef\")}"," {t(\"glossaryWithdrawalRestrictionTerm\")}"," {t(\"glossaryWithdrawalRestrictionDef\")}"," {t(\"glossaryProductTerm\")}"," {t(\"glossaryProductDef\")}"," {t(\"glossaryPackedUnitTerm\")}"," {t(\"glossaryPackedUnitDef\")}"," {t(\"glossarySalesLineTerm\")}"," {t(\"glossarySalesLineDef\")}"," {t(\"glossaryConfirmOrderTerm\")}"," {t(\"glossaryConfirmOrderDef\")}"," {t(\"glossaryVoidOrderTerm\")}"," {t(\"glossaryVoidOrderDef\")}"," {t(\"glossaryCancelOrderTerm\")}"," {t(\"glossaryCancelOrderDef\")}"," {t(\"glossaryInventoryItemTerm\")}"," {t(\"glossaryInventoryItemDef\")}"," {t(\"glossaryInventoryLotTerm\")}"," {t(\"glossaryInventoryLotDef\")}"," {t(\"glossaryInventoryMovementLedgerTerm\")}"," {t(\"glossaryInventoryMovementLedgerDef\")}"," {t(\"glossaryWaterUsageTerm\")}"," {t(\"glossaryWaterUsageDef\")}"," {t(\"glossaryFeedUsageTerm\")}"," {t(\"glossaryFeedUsageDef\")}"," {t(\"glossaryAdjustmentDiscardTerm\")}"," {t(\"glossaryAdjustmentDiscardDef\")}"," {t(\"glossaryRolesTerm\")}"," {t(\"glossaryRolesDef\")}"," {t(\"glossaryLockedEntryTerm\")}"," {t(\"glossaryLockedEntryDef\")}"," {t(\"glossaryAdjustEntryTerm\")}"," {t(\"glossaryAdjustEntryDef\")}"," {t(\"glossaryVoidEntryTerm\")}"," {t(\"glossaryVoidEntryDef\")}"," {t(\"glossaryFarmSettingsTerm\")}"," {t(\"glossaryFarmSettingsDef\")}"," {t(\"glossaryCurrencyLockTerm\")}"," {t(\"glossaryCurrencyLockDef\")}"," {t(\"glossaryFarmLogoTerm\")}"," {t(\"glossaryFarmLogoDef\")}"," {t(\"glossaryFarmPaletteTerm\")}"," {t(\"glossaryFarmPaletteDef\")}"," {t(\"glossaryUiLanguageTerm\")}"," {t(\"glossaryUiLanguageDef\")}"," "," }} />"," "," "," "," );","}",[6469,6470,6471,6472,6473,6474,6475,6476,6477],{"_761":49,"_49":6492},{"_761":6479,"_164":6146,"_787":6490,"_789":6491},{"_761":49,"_49":6489},{"_761":6479,"_164":4338,"_787":6487,"_789":6488},{"_761":6479,"_164":2904,"_787":6485,"_789":6486},{"_761":6479,"_164":999,"_787":6483,"_789":6484},{"_761":49,"_49":6482},{"_761":6479,"_164":781,"_787":6480,"_789":6481},{"_761":49,"_49":6478},"\n\nNo additional changes were necessary, so I did not create a commit or follow-up PR.\n\nTesting\n- ✅ `cd web && npm run typecheck`\n- ⚠️ `cd web && npx vitest run src/routes/HelpPage.test.tsx` (could not execute because the environment provides Node `v20.20.2`, while the installed Vitest worker invokes the unsupported `--no-experimental-webstorage` option)\n- ✅ `git status --short` (working tree clean)","repo_file_citation",243,259,"\n- The regression test verifies both cells are sourced from the translation catalog rather than hardcoded text, including protection against a definition wired to unrelated copy. ",2117,2123,2040,2046,2350,2356,"\n- English, Spanish, and Tagalog glossary entries are present. ",470,473,"### Re-check Result\n\nNo further issues found at `bdfe265`.\n\nThe P1 is addressed:\n\n- The in-app glossary now renders a dedicated step-up authentication row using localized term and definition keys. ",{"_95":329,"_45":87,"_99":329,"_6495":6496,"_6497":6498,"_6499":6500,"_135":-5,"_122":6501},[86],"input_items",[6521,6522,6523,6524,6525,6526,6527,6528,6529,6530,6531,6532,6533,6534,6535,6536,6537,6538,6539,6540,6541,6542,6543,6544,6545,6546,6547,6548,6549,6550,6551,6552,6553,6554,6555,6556,6557],"external_post_config",{"_6502":6503,"_266":199,"_6504":308,"_277":-5,"_6505":260,"_6506":-5,"_6507":-5,"_6508":6509,"_6510":6511,"_6512":-5,"_6513":-5,"_6514":6515,"_6516":18,"_6517":62,"_6518":57,"_6519":18,"_6520":-5},"user_model_slug","slug",1785605872.46895,"installation_id",150444056,"pr_number","repo_id","gitlab_service_account_project_id","review_trigger","comment_id",5152592524,"comment_type","issue","pr_write_guard_token","pending_pr_reaction_id","pending_comment_reaction_id",391398534,"comment_if_no_findings","comment_on_error","share_url","is_parallel_review","review_summary_id",{"_95":418,"_99":329,"_410":6607},{"_315":316,"_317":318,"_6603":6604,"_6605":132,"_325":-5,"_95":6606},{"_95":6558,"_317":6602,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6601,"_164":6593,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6600,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6599,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6598,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6597,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6596,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6595,"_164":6581,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6594,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6592,"_164":6593,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6591,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6590,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6589,"_164":6581,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6588,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6587,"_164":6568,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6586,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6585,"_164":6568,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6584,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6583,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6582,"_164":6581,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6580,"_164":6581,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6579,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6578,"_164":6575,"_6560":6561,"_6562":6576},{"_95":6558,"_317":6577,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6574,"_164":6575,"_6560":6561,"_6562":6576},{"_95":6558,"_317":6573,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6572,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6571,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6570,"_164":6568,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6569,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6567,"_164":6568,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6566,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6565,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6564,"_164":6146,"_6560":6561,"_6562":6563},{"_95":6558,"_317":6559,"_164":6146,"_6560":6561,"_6562":6563},"pull_request_comment","Valid, and it's the same defect I already fixed on #335 — I just didn't carry the lesson across. Fixed in `bdfe265`.\n\nConfirmed before fixing. `grep -i \"step-up\" web/src/routes/HelpPage.tsx` returned exactly one hit: line 130, the `signingInStepUp` sign-in prose. The glossary table (``, rows 462–500+) had no step-up row at all. `specs/product/GLOSSARY.md:563` had the concept; the in-app surface didn't. So the finding is exactly right.\n\nWhat changed (5 files, +44):\n- `HelpPage.tsx` — one `` using `glossaryStepUpAuthTerm` / `glossaryStepUpAuthDef`, placed immediately after `glossaryTooManySignInAttempts`. Both are sign-in-security concepts; the roles row is about permissions, not an authentication barrier.\n- `en.ts` / `es.ts` / `tl.ts` — the key pair in all three, es/tl machine-drafted inline per the translate-now policy (pending native review), no English placeholders. Copy is user-facing only: no JWT/grant/audience, no issue numbers.\n- `HelpPage.test.tsx` — one test on the existing `withOverride` pattern, so it asserts against `i18n.addResource` markers rather than hardcoded English.\n\nVerification, run by me on the pushed tree:\n\n- `npm run typecheck` — clean. (This is also the es/tl parity check: the catalogs are typed against `en`'s shape, so a key missing from one is a compile error.)\n- `HelpPage.test.tsx` — 18/18. Full web suite — 1239/1239 across 66 files.\n- Mutation 1, remove the ``: RED, `Unable to find role=\"rowheader\" ... name \"STEP-UP-TERM-MARKER\"`, 1 failed / 17 passed. Restored → 18/18.\n- Mutation 2, keep the row but point the `` at `glossaryTooManySignInAttemptsDef`: also RED, 1 failed / 17 passed. This one matters more than the first — a row-presence test would survive it, and a mis-wired definition cell is the failure this row is most likely to have in practice. Restored → 18/18.\n\nOne note on the test, since it nearly shipped wrong: my first draft asserted the negative against `/re-enter your current password/i`, which also appears in the `signingInStepUp` prose elsewhere on the same page — the assertion would have been answered by a different section entirely. It now asserts against phrasing unique to the glossary definition.\n","side","RIGHT","line",131,"_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Add step-up authentication to the in-app glossary\n\nThis adds the step-up explanation to the Help page's sign-in section and the product glossary, but the live glossary table at the bottom of `HelpPage` and its translation keys remain unchanged. Consequently, users consulting the in-app glossary cannot find the newly introduced step-up-authentication concept; add a localized glossary row alongside this Help update as required for user-visible behavior changes.\n\nAGENTS.md reference: [AGENTS.md:L187-L187](https://github.com/mforce/cluckwork/blob/185ff3a3bb9793d498145bc9d56238d8660ee9e5/AGENTS.md#L187-L187)\n\nUseful? React with 👍 / 👎.","\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `185ff3a3bb`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","@codex the P2 (record the cookie owner's logout before revocation) is addressed in `185ff3a`.\n\nYou were right that this was unfixed by the earlier bearer-ordering change: I had applied the fail-safe ordering at the outer call site (`AuthEndpoints.Logout`) and left the same hazard inside `RevokeRefreshTokenAsync`, where the cookie owner's `RecordLogout` still followed the throwing bulk UPDATE. It now runs immediately after the owner lookup, so a database failure over-revokes rather than under-revokes.\n\nCoverage is a direct unit-level exercise of `RevokeRefreshTokenAsync` with a fault interceptor on the bulk UPDATE, asserting the registry rather than an HTTP status — my first HTTP-level attempt silently never fired (it matched `\"RefreshTokens\"` while the table is `refresh_tokens`) and would have passed for the wrong reason; it was deleted rather than kept. Mutation-checked: restoring the old ordering turns it red with `Expected: True, Actual: False`.\n\nIntegration 676 passed. Ready for your re-check.","Fixed in `185ff3a`. Correct, and it is my previous fix applied one layer too shallow.\n\nLast round I reordered `AuthEndpoints.Logout` so the bearer's in-memory `RecordLogout` runs before the database revoke. But inside `RevokeRefreshTokenAsync` the cookie owner's `RecordLogout` still sat after `ExecuteUpdateAsync` — so a throwing bulk update skipped it, and the cookie owner's grant survived their own logout while the SPA had already cleared local auth. I applied the fail-safe ordering principle at one call site and never checked whether it held at the other; your \"the rebased code still places the cookie-owner registry update after the throwing database update\" is exactly right.\n\n`RecordLogout` now runs immediately after the owner lookup, before the bulk update. A database failure therefore over-revokes (grants dead, refresh row possibly still live) rather than under-revoking — the same direction as the outer path.\n\nOn the test, including two mistakes of mine worth recording.\n\nMy first attempt asserted the HTTP status of a faulted logout and never fired at all: I wrote a `DbCommandInterceptor` matching the string `\"RefreshTokens\"`, but the entity maps to a snake_cased table — `RefreshToken.cs` does `builder.ToTable(\"refresh_tokens\")`. The match could never hit, so the request returned 204 and the test would have passed for the wrong reason. I then misdiagnosed that failure publicly as a DI problem (a second `AddDbContext` being a TryAdd no-op). That diagnosis was wrong; the cause was my own string.\n\nThe replacement exercises `RevokeRefreshTokenAsync` directly as a unit — the pattern `ReportQueryBoundingTests` already uses — building `AppDbContext` with the interceptor attached and handing the provider a privately-held `InMemoryStepUpGrantRegistry`, so the assertion reads the actual call rather than an HTTP status. A second scaffolding bug surfaced there too: `ExtractRefreshCookie` returns the raw percent-encoded `Set-Cookie` text, which every other test round-trips through ASP.NET's own cookie parsing; calling the provider in-process skips that, so the token needs `Uri.UnescapeDataString` before the hash matches.\n\nThe broken HTTP-level test was deleted rather than left beside the working one.\n\nMutation-checked independently: restoring the `ExecuteUpdateAsync`-before-`RecordLogout` ordering turns `RevokeRefreshTokenAsync_WhenTheBulkUpdateThrows_StillRecordsTheOwnersLogout` red (`Expected: True, Actual: False`) with the other 32 still green; restored → 33/33. The sibling bearer-path test is untouched and still passes.\n\nBuild clean at 0 warnings; integration suite 676 passed / 0 failed; Domain 283, Application 114.","src/Cluckwork.Infrastructure/Identity/IdentityProvider.cs","\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `748a546204`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Record the cookie owner's logout before revocation\n\nWhen the token-owner lookup succeeds but `ExecuteUpdateAsync` subsequently throws—for example, because of a transient connection failure or deadlock—these lines never run. If the logout has no valid bearer, or its bearer belongs to another tab's user, the SPA has already cleared local authentication and treats the failure as best-effort, but the cookie owner's captured access token and unexpired step-up grant remain usable. The fresh evidence beyond the prior bearer-ordering comment is that the rebased code still places the cookie-owner registry update after the throwing database update; record it immediately after the successful owner lookup instead.\n\nUseful? React with 👍 / 👎.","@codex thanks — noting that the `Didn't find any major issues` verdict was for `aa3e6df`, but the branch has since been rebased onto `main` and the head is now `748a546`. Two things changed in that rebase that are worth a fresh look rather than inheriting the previous pass:\n\n1. The branch's own copy of the `/error` exception-handler skip in `IdempotencyMiddleware` was dropped — that fix now comes from `main` (#345/#346), which landed the same guard independently while this PR carried it.\n2. The rebase across #337 (which restructured that middleware and changed its constructor) initially produced no conflict while silently duplicating the guard; that was caught and removed, but the file is worth re-reading on the rebased head.\n\nWhat the branch still contributes to that file is only the two `ResponseNotCacheable` entries — `/api/v1/auth/step-up` and `/api/v1/auth/logout` — both of which are load-bearing: without the logout entry, an authenticated logout resolves a tenant and 400s for a missing `Idempotency-Key`, so the SPA could not log out at all.\n\nIntegration 675 passed, web 1238 passed, coverage gate exit 0. Ready for a re-check against `748a546`.","Codex Review: Didn't find any major issues. Delightful!\n\nReviewed commit: `aa3e6df813`\n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","@codex the P2 (clear the step-up password when leaving the Owner role) is addressed in `aa3e6df`.\n\nYou found a credential leak of the operator's own* account password, and the root cause was the duplication you pointed at: `closeCreate()` is supposed to be the single dialog-reset path, but the create-success path repeated the field list inline — so when #308 added `createStepUpPassword`, only one of the two copies learned about it. Fixed by closing through `closeCreate()` rather than extending the duplicate, so future dialog state can only be forgotten in one place.\n\nWorth flagging that the existing \"reopening after a successful use shows it empty\" test passes with the bug present, because it submits as Owner and so runs the clearing branch. The new test switches Owner → Worker first, which is the only path where nothing clears the field. Mutation-checked red. Ready for your re-check.","Fixed in `aa3e6df`. Real, and worth noting it is the same structural bug as #314, which was fixed on this repo earlier today for exactly the same reason.\n\nYour trace is exact: pick Owner, type the current password, switch to Worker, submit. The `role === OWNER_ROLE` branch that clears the field never runs, and the success path did not clear it either — so the operator's own account password survived in state and appeared on the next open with Owner selected.\n\nThe root cause is the duplication you pointed at. `closeCreate()` exists precisely to be the one reset path (that was #314's fix), but the success path repeated the field list inline and called `setCreating(false)` directly. The copy then drifted the moment #308 added new dialog state: the inline list never learned about `createStepUpPassword`.\n\nSo rather than adding a sixth line to the duplicate, the success path now closes through `closeCreate()`. New dialog state can only be forgotten in one place instead of two.\n\nOn the test that should have caught this: `never stores the entered step-up password: reopening after a successful use shows it empty` submits as Owner, so it runs the clearing branch on the way past and passes with the bug present. The new test switches Owner → Worker before submitting, which is the only path where nothing clears the field. It also asserts `stepUp` was never called and the grant argument is `undefined`, so it fails if the switch silently still requested a grant.\n\nMutation-checked: restoring the duplicated reset list turns the new test red (`expected '' but got 'OwnerCurrentPw!1'`-shaped failure on the reopened field); restored → green. `UsersPage.test.tsx` 58 passed, full web suite 1238 passed / 66 files, typecheck clean, coverage gate exit 0 with no floor lowered.","web/src/routes/UsersPage.tsx",208,"\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `d568f0cdab`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Clear the step-up password when leaving the Owner role\n\nIf an operator selects Owner, enters their current password, and then changes the role to Worker before submitting, this conditional branch never clears `createStepUpPassword`; the field is merely unmounted. A successful Worker creation also closes the dialog via `setCreating(false)` rather than `closeCreate`, so reopening the dialog and selecting Owner reveals the retained account password. Clear this state when switching away from Owner, or unconditionally when the create flow settles.\n\nUseful? React with 👍 / 👎.","@codex the P2 (record the bearer logout even if cookie revocation fails) is addressed in `d568f0c` — the in-memory recording now runs before the database revoke, so a transient outage over-revokes rather than under-revokes. The exception still propagates; that path is a 500.\n\nWriting the test for it surfaced a second, adjacent bug worth your attention: `UseExceptionHandler`'s `/error` re-execution passes back through `IdempotencyMiddleware` with the tenant still resolved and no `Idempotency-Key`, so a genuine 500 on any auth route was being silently downgraded to a misleading 400 \"Idempotency-Key header is required\". The \"fails loudly\" property was already broken before this change. That is fixed in the same commit (skip when `IExceptionHandlerFeature` is present) and called out in the thread reply — say if you would rather it travel as its own commit.\n\nMutation-checked: reverting only the reordering turns the new test red with `Expected: Forbidden, Actual: Created`. Ready for your re-check.","Fixed in `d568f0c`. Correct, and it was a hole in the fix from one round earlier — I put the in-memory recording after the database call, so a transient outage skipped it entirely.\n\nShape: plain reordering, no try/catch. `RecordLogoutAsync` (in-memory, cannot fail) now runs first; `RevokeRefreshTokenAsync` (hits Postgres, can throw) runs second. Reordering alone gives the independence asked for — the bearer path's success no longer depends on anything after it — and it needs no exception handling to reason about.\n\nThe exception is deliberately not caught: a logout that fails loudly when the database is down is worth keeping, and the SPA already treats logout as best-effort on its side. Response on that path is 500.\n\nOrdering matters in one direction specifically: a DB failure now leaves grants revoked but the refresh token alive. Over-revoking is the fail-safe direction for a security control; the previous order failed the other way.\n\nA second, adjacent bug surfaced while writing the test, and I want to flag it explicitly rather than bury it. Asserting \"fails loudly with a 500\" turned out to be impossible, because `UseExceptionHandler`'s `/error` re-execution passes back through `IdempotencyMiddleware` with the original tenant still resolved and no `Idempotency-Key` header — which none of login/refresh/change-password/step-up/logout ever send. So a genuine 500 on any of those routes was being silently downgraded to a misleading 400 \"Idempotency-Key header is required\". The \"fails loudly\" guarantee was already broken before this change.\n\n`IdempotencyMiddleware` now skips when `IExceptionHandlerFeature` is present — the same signal `Program.cs`'s Serilog request logging already uses to detect that re-execution. It is bundled in `d568f0c` because the new test cannot assert the real status without it; happy to split it into its own commit or PR if you would rather it travel separately.\n\nMutation check (re-run independently): reverting only the reordering, keeping the middleware fix, turns `Logout_WhenCookieRevocationThrows_StillRecordsTheBearersLogout_AndFails500` red with `Expected: Forbidden, Actual: Created` — the grant was not revoked, which is precisely the finding. Restored → green.\n\nThe failure is injected by a `RevokeRefreshTokenThrowsDecorator` over the real `IdentityProvider`, registered via `ConfigureTestServices` following the file's existing override pattern — no simulated database outage.\n\nBuild clean at 0 warnings; integration 654 passed / 0 failed (`StepUpAuthTests` 31 → 32); Domain 283, Application 114.","src/Cluckwork.Api/Endpoints/Auth/AuthEndpoints.cs","_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Record the bearer logout even if cookie revocation fails\n\nWhen a refresh cookie is present and `RevokeRefreshTokenAsync` throws—for example, during a transient database outage—the exception prevents this bearer-specific path from running. The SPA still clears its local access token and treats logout as best-effort, but the user's outstanding step-up grant remains valid; if the database recovers before the grant expires, a captured access token and grant can still perform the privileged operation after the user logged out. Ensure the in-memory bearer logout is recorded independently of failures in the cookie revocation path.\n\nUseful? React with 👍 / 👎.","\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `974feb646c`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","@codex the P2 (revoke the access-token user's grant on logout) is addressed in `974feb6`. Premise verified on all three points before changing anything — per-tab access token, per-origin cookie, and a logout that consulted only the cookie.\n\nTwo things your description didn't cover that shaped the fix:\n\n1. The SPA sent no bearer on logout at all, so a server-only change would have been dead code — the \"when available\" case never occurred against the real client. The fix spans both sides.\n2. Attaching a bearer makes `IdempotencyMiddleware` (which gates on `tenant.IsResolved`) start demanding an `Idempotency-Key` on an authenticated logout. `/api/v1/auth/logout` is now exempt; a mutant removing that exemption turns five tests red.\n\nThe bearer path deliberately records the logout instant without revoking that user's refresh tokens — otherwise ending one tab would sign them out of every device, which a dedicated test pins. Six mutants, all red; one regression-guard test stays green under the first mutant and I've explained why in the thread rather than dressing it up as a kill.\n\nReady for your re-check.","Fixed in `974feb6`. The premise holds on all three points, verified before touching anything:\n\n1. Access token is per-tab — `web/src/auth/tokenStore.ts` keeps it in a module-level `let accessToken`, one instance per tab.\n2. Refresh cookie is per-origin — `AuthCookies.BuildOptions` sets `HttpOnly`, `SameSite=Strict`, `Path=/api/v1/auth`. One jar per browser profile; last login wins.\n3. Logout derived the grant owner solely from the cookie — it read only `ReadRefreshCookie`, and `RevokeRefreshTokenAsync` recorded `RecordLogout(tokenRow.UserId, …)`. No bearer was consulted.\n\nOne thing your description didn't cover, and it decided the shape of the fix: the SPA sent no bearer on logout at all (`raw(\"/auth/logout\", …)` with the optional access-token argument omitted). A server-side-only change would have been dead code against the real client — the \"when available\" case never occurred. So the fix spans both sides.\n\nAttaching a bearer then springs a trap: `IdempotencyMiddleware` gates on `tenant.IsResolved`, so an authenticated logout would start demanding an `Idempotency-Key` and 400. `/api/v1/auth/logout` is now exempt, and a mutant removing that exemption turns five tests red — so this was real, not theoretical.\n\nMechanism. New `IIdentityProvider.RecordLogoutAsync(userId)` records the logout instant without revoking refresh tokens. `Logout` now guards the two axes independently: cookie present → revoke its token and record its owner; caller authenticated → record the bearer's subject. The SPA captures the bearer before the synchronous `clearAccessToken()` and sends it optionally, so an expired token simply leaves the call unauthenticated and the cookie path still ends the session.\n\nThe three cases:\n- Cookie missing/expired, caller authenticated — `RecordLogoutAsync` fires alone.\n- Unauthenticated with a valid cookie (ordinary logout) — unchanged; pre-existing tests pass untouched.\n- Both present, same user — idempotent for free: `RecordLogout` uses `AddOrUpdate` keeping the max, and both paths share the injected `TimeProvider`.\n\nThe bearer path is deliberately narrower than the cookie path. It records the logout instant but does not revoke that user's refresh tokens — otherwise ending one tab would sign them out of every device. `Logout_WithAForeignCookie_DoesNotRevokeTheBearerUsersOtherSessions` pins that.\n\nMutation results:\n\n| Mutant | Result |\n|---|---|\n| `RecordLogoutAsync` disabled | RED ×2 — both finding-scenario tests (re-run independently) |\n| idempotency exemption removed | RED ×5 |\n| swap instead of add (skip cookie revoke when authed) | RED ×2 |\n| over-revoke the bearer user's whole token family | RED ×1 |\n| record at `DateTimeOffset.MaxValue` (permanent poison) | RED ×1 |\n| SPA reads the token after the clear | RED ×1 |\n\nHonest caveat: `…WhenCookieAndBearerAreTheSameUser` stays GREEN under the first mutant. That is correct — the cookie path already covers same-user logout, so it is a regression guard against over-/under-revoking rather than a bug detector. Mutants 2 and 3 do turn it red.\n\nNo GLOSSARY change: line 582 already promises grants are \"invalidated … by that user logging out\". No concept appears or changes meaning — the fix makes an already-documented contract true. The `StepUpGrantService` threat-model comment's \"Revoked by logout\" bullet was updated instead, preserving the non-enumerating collapse, audience isolation, single-use `jti`, stamp revocation and tick-precision rationale verbatim.\n\nBuild clean at 0 warnings; integration 653 passed / 0 failed (StepUpAuthTests 24 → 31); `npm test` 1237 passed; coverage gate exit 0 with no floor lowered.","\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `a5214cef64`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Revoke the access-token user's grant on logout\n\nWhen two tabs hold access tokens for different users, the refresh cookie is shared while `tokenStore.ts` keeps each access token in that tab's memory; logging out from user A's tab can therefore present user B's cookie. This lookup records logout only for the cookie owner, so A's outstanding step-up grant remains usable with A's still-valid stolen access token despite A explicitly logging out (the same occurs if A's cookie is missing or expired). Include the authenticated access-token user in logout revocation when available rather than deriving the grant owner solely from the refresh cookie.\n\nUseful? React with 👍 / 👎.","@codex the P2 (non-session status for a wrong step-up password) is addressed in `a5214ce` — now 400, matching `ChangePassword`, which returns the same `Users.CurrentPasswordIncorrect` error value. 403 stays reserved for `StepUpErrorCodes.Required` and the genuinely-unauthenticated branch stays 401.\n\nYour read on the impact was right and it was the sharpest finding on this PR: the double-count silently cut the #128 lockout this same PR introduced from five attempts to three. Tests now assert the failed-access count directly off the user row through an `apiFetch`-faithful client, since a plain `HttpClient` issues one request per attempt regardless of status and would not catch a regression. Full details and mutation results are in the reply on the thread.\n\nReady for your re-check.","Fixed in `a5214ce`. Confirmed real, and it was the most consequential finding on this PR — because the endpoint it breaks is the one this same PR just hardened.\n\n`IssueAsync` returns `Error.Validation(\"Users.CurrentPasswordIncorrect\", …)` — the identical error value `ChangePassword` returns as a 400. The endpoint was overriding a validation error into a session-expiry status, and `apiFetch` treats every 401 as a stale access token: refresh, then replay the same wrong password. So one typed password cost two failed accesses, cutting the #128 five-attempt lockout this PR introduced down to three, and burning a refresh-token rotation each time.\n\nNow `StatusCodes.Status400BadRequest`, matching `ChangePassword`. Deliberately not 403 — that stays reserved for `StepUpErrorCodes.Required`, the non-enumerating grant-validation failure on the gated endpoints, which is a different thing and is untouched. The genuinely-unauthenticated branch (`!currentUser.IsResolved || !tenant.IsResolved`) stays 401, because that one really is a session problem.\n\nThe damage is invisible to a plain `HttpClient` — it issues one request per attempt whatever the status — so a status-code assertion alone would not have caught a regression that reinstates the retry. `StepUpAuthTests` gained a `SpaLikeClient` that reproduces `apiFetch` exactly (refresh-and-replay on a 401, and only on a 401), with counts read off the user row via `UserManager`, not inferred from responses:\n\n| | fixed (400) | mutant (401) |\n|---|---|---|\n| 1 user attempt | 1 failed access | 2 |\n| after 4 attempts | count 4, not locked | count 0, locked — Identity zeroes the counter on lockout; it had already tripped at attempt 3 |\n| refresh token after 4 attempts | unrotated | rotated 4× |\n\nMutation results, re-run independently of the implementation. Reverting 400 → 401 turns three tests red:\n\n- `StepUp_WrongCurrentPassword_IsACredentialRejection_NotASessionExpiry`\n- `StepUp_WrongPassword_RecordsExactlyOneFailedAccessPerUserAttempt` — fails on the count (`Expected: 1 / Actual: 2`), asserted before the status on purpose so the mutant fails on the damage rather than its cause\n- `StepUp_LockoutTripsOnTheFifthUserAttempt_NotTheThird` (`Expected: 4 / Actual: 0`)\n\nSPA side: flipping the mocked reply to 401 turns `issues exactly one request for a rejected password` red (`expected 1 times, but got 2 times`). A paired test asserts a real 401 still refreshes and retries, so the fix doesn't quietly disable transparent refresh everywhere. No green mutants.\n\n`client.ts` took a contract note only — no behaviour change; `UsersPage` renders `ApiError.message` either way, so the wrong-password text a user sees is unchanged.\n\nBuild clean at 0 warnings. Integration 646 passed / 0 failed (StepUpAuthTests 24/24); Domain 283, Application 114; `npm test` 1235 passed / 66 files; typecheck clean; coverage gate exit 0 with no floor lowered.","Codex Review: Didn't find any major issues. Already looking forward to the next diff.\n\nReviewed commit: `0a186854d3`\n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","@codex the P2 (compare logout times at JWT precision) is addressed in `0a18685` — the grant now carries a tick-precision `stepup_iat_ticks` claim and the registry comparison stays `<=`, so the same-second-before-logout rejection is preserved. Reasoning and mutation results are in the reply on the original thread. Ready for your re-check.","Fixed in `0a18685`. The finding is real and the diagnosis was exact: `nbf` is a NumericDate, so `jwt.ValidFrom` is floored to the second while `RecordLogout` keeps ticks, and a grant minted at `:00.800` after a `:00.500` logout presented as `:00.000` and was refused.\n\nBoth suggested remedies are not equivalent — normalizing precision does not work here. Flooring the stored logout time to the second leaves both values at `:00.000`, and the comparison is `<=`, so the fresh grant is still rejected. Reaching for strict `<` to compensate would be a security regression: it would accept a grant genuinely minted earlier in the same second as the logout, which is precisely what this check exists to stop. So this takes the second option — carry a higher-precision issuance value.\n\n`IssueAsync` now mints `stepup_iat_ticks` (`now.UtcTicks`, invariant culture) inside the signed grant; `ValidateAsync` reads that instead of `jwt.ValidFrom`. Standard `nbf`/`exp` are untouched, so ordinary JWT validation is unchanged.\n\nThe comparison in `InMemoryStepUpGrantRegistry` is deliberately left as `issuedAt <= loggedOutAt`. Only its input got more precise. A grant minted at `:00.200` now presents `:00.200` rather than `:00.000`, so it is still `<=` a `:00.500` logout and still revoked. The fix widens nothing.\n\nFail-closed: a missing, non-numeric or out-of-range claim collapses into the same `DeniedError` as every other rejection — no fallback to the floored `nbf`. Non-enumeration, audience isolation, single-use `jti`, stamp revocation and account/user binding are unchanged.\n\nOne thing worth recording, because it nearly shipped a hole. The obvious two-test pair — \"grant after logout, same second, accepted\" and \"grant before logout, same second, rejected\" — does not cover this. The second test passes under strict `<` as well (`0.2 < 0.5` either way), so it cannot detect the regression. A third test was needed, placing the grant and the logout at the exact same instant — the only tick where `<=` and `<` disagree.\n\nVerification (mutants re-run independently, not just taken from the implementation report):\n\n| Mutant | Result |\n|---|---|\n| revert to `jwt.ValidFrom` | RED — `CreateOwner_StepUpIssuedAfterLogoutInTheSameSecond_IsAccepted` |\n| loosen to `issuedAt < loggedOutAt` | RED — `CreateOwner_StepUpIssuedAtTheExactLogoutInstant_IsStillRevoked` |\n| disable the logout check | RED — 3 tests, incl. the pre-existing `CreateOwner_StepUpRevokedByLogout_Is403` |\n| drop the fail-closed parse guard | does not compile — definite assignment makes a silent fail-open structurally impossible |\n\n`StepUpAuthTests` 22/22, full integration suite 644 passed / 0 failed, build clean at 0 warnings.","src/Cluckwork.Infrastructure/Identity/StepUpGrantService.cs","\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `f12eeb9677`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Return a non-session status for a wrong step-up password\n\nWhen the SPA submits an incorrect current password, this 401 is not merely displayed: `stepUp()` uses `apiPost()`, and `apiFetch()` treats every 401 as an expired access token, refreshes the session, and retries the same password. With a valid refresh cookie, one user attempt therefore records two failed accesses, causing the five-attempt account lockout to trigger after only three submissions and unnecessarily rotating the refresh token; if refresh is unavailable, it can instead sign the user out. Return a non-401 credential-rejection status, as the change-password flow does, or explicitly suppress transparent refresh for this endpoint.\n\nUseful? React with 👍 / 👎.","@codex your issues have been addressed can you please check?","To use Codex here, [create an environment for this repo](https://chatgpt.com/codex/cloud/settings/environments).","@codex your feedback has been address please check","The lockout finding is correct and was the right call to block on. Fixed.\n\nYou're right that this is a second password-verification oracle, and that guarding only login leaves the per-IP limiter alone on the surface that matters most — which a distributed attacker rotating source IPs simply walks around. #128 exists because those two controls are meant to work together.\n\n`/auth/step-up` now checks `IsLockedOutAsync` first (same non-enumerating denial, still paying PBKDF2 so a locked account isn't distinguishable from a wrong password), records `AccessFailedAsync` on failure, and resets the count on success.\n\nThe lockout logic moved into a shared `AccountLockout` helper rather than being copied into the second call site. A duplicated retry loop is a second thing to forget when a third oracle appears — which is precisely how this one got missed.\n\nYour meta-point is the most useful thing in this review, and I've written it into the commit message so it survives: mutation testing reverts guards that exist and is structurally blind to a guard that was never written. Thirteen mutants all went red and none of them could have caught this. So the new coverage is positive tests rather than another mutant — locked out after the threshold, still working below it, failures cleared on success — with the enforcement half mutation-checked to confirm it reproduces your exploit exactly (six wrong then correct → 200 without the guard, refused with it).\n\nWorth noting the guard is load-bearing in a second way: removing it entirely doesn't even compile, because `db` becomes unread and warnings are errors here.\n\nMinor (logout epoch) — also fixed. You were right that `RevokeRefreshTokenAsync` only recorded the epoch when the presented row was still unrevoked, so a cookie already superseded by a background rotation recorded nothing and left a grant alive for its remaining lifetime. The lookup no longer filters on `RevokedAt` — identifying the user is what matters, not whether that particular row is live. A genuinely unknown token still records nothing.\n\nFull suite 1038/1038, 0 warnings; frontend 1233/1233, typecheck clean.\n","\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\nReviewed commit: `b84ef7da62`\n \n\n ℹ️ About Codex in GitHub \n \n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n ","_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Compare logout times at JWT precision\n\nWhen a user logs out, signs back in, and obtains a step-up grant before the UTC second rolls over, the JWT's `ValidFrom` has whole-second precision while `RecordLogout` retains subsecond ticks. The new grant therefore appears to have been issued before the prior logout and is permanently rejected with 403, forcing the user to wait and re-enter their password for another grant. Normalize both timestamps to the same precision or carry a higher-precision issuance value.\n\nUseful? React with 👍 / 👎.","#### ⚠️ GitGuardian has uncovered 2 secrets following the scan of your pull request.\n\nPlease consider investigating the findings and remediating the incidents. Failure to do so may lead to compromising the associated services or software components.\n\n\n\n\n🔎 Detected hardcoded secrets in your pull request \n \n\n| GitGuardian id | GitGuardian status | Secret | Commit | Filename | |\n| -------------- | ------------------ | ------------------------------ | ---------------- | --------------- | -------------------- |\n| [35146328](https://dashboard.gitguardian.com/workspace/16690/incidents/35146328?occurrence=286461060) | Triggered | Generic Password | d3e4d5447c5ce648b7b93c053f7829de4d9ea476 | web/src/api/client.test.ts | [View secret](https://github.com/mforce/cluckwork/commit/d3e4d5447c5ce648b7b93c053f7829de4d9ea476#diff-99f333248f6a93adfaddbb96af70717586072674c735fafaaa8234d252bb31adR687) |\n| [35626202](https://dashboard.gitguardian.com/workspace/16690/incidents/35626202?occurrence=286461061) | Triggered | Generic Password | aace4feefbd1469b879b0e4cfc1b69c265e62977 | src/Cluckwork.Infrastructure/Identity/AccountLockout.cs | [View secret](https://github.com/mforce/cluckwork/commit/aace4feefbd1469b879b0e4cfc1b69c265e62977#diff-caf875722ff689aea1e93112afcc4dd43963549822a28d95e1837a7a82e07124R10) |\n\n\n\n \n\n\n🛠 Guidelines to remediate hardcoded secrets \n \n\n1. Understand the implications of revoking this secret by investigating where it is used in your code.\n2. Replace and store your secrets safely. [Learn here](https://blog.gitguardian.com/secrets-api-management?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) the best practices.\n3. Revoke and [rotate these secrets](https://docs.gitguardian.com/secrets-detection/secrets-detection-engine/detectors/generics/generic_password#revoke-the-secret?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment).\n4. If possible, [rewrite git history](https://blog.gitguardian.com/rewriting-git-history-cheatsheet?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment). Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.\n\nTo avoid such incidents in the future consider\n\n- following these [best practices](https://blog.gitguardian.com/secrets-api-management/?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) for managing and storing secrets including API keys and other credentials\n- install [secret detection on pre-commit](https://docs.gitguardian.com/ggshield-docs/integrations/git-hooks/pre-commit?utm_source=product&utm_medium=GitHub_checks&utm_campaign=check_run_comment) to catch secret before it leaves your machine and ease remediation.\n\n\n \n\n---\n\n^{🦉 [GitGuardian](https://dashboard.gitguardian.com/auth/login/?utm_medium=checkruns&utm_source=github&utm_campaign=cr1) detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}","base_ref","91aeb696ea0b4336653b96c1147881403a5f11fc","head_ref","pull_request_info",[6608],{"_761":49,"_49":6609},"@codex the P1 is addressed in bdfe265 — see the thread reply on discussion_r3696173627 for detail and verification.",[6877,6878],[],{"_766":767,"_49":768,"_769":770},{"_740":6868},{"_340":6867},{"_340":6645},{"_307":308,"_298":309,"_310":311,"_312":62,"_313":18,"_314":18,"_315":316,"_317":318,"_319":270,"_320":130,"_321":322,"_323":324,"_325":326,"_327":-5,"_328":-5,"_329":6644,"_331":332,"_333":334,"_335":336,"_337":338},{"_45":126,"_196":197,"_198":199,"_200":18,"_201":202,"_203":204,"_205":6633,"_207":-5,"_208":209,"_210":18,"_211":6634,"_213":202,"_214":202,"_215":6635,"_217":6636,"_219":6637,"_221":-5,"_222":223,"_224":225,"_226":227,"_228":6638,"_58":-5,"_122":230,"_231":6639,"_233":6640,"_235":236,"_237":18,"_238":18},{"_136":6626},[6620,6621,6622,6623,6624,6625],{"_151":174,"_153":168,"_155":169,"_157":166,"_159":175,"_161":162,"_163":35,"_164":-5},{"_151":173,"_153":168,"_155":169,"_157":166,"_159":170,"_161":162,"_163":35,"_164":-5},{"_151":171,"_153":168,"_155":169,"_157":166,"_159":172,"_161":162,"_163":35,"_164":-5},{"_151":167,"_153":168,"_155":169,"_157":166,"_159":170,"_161":162,"_163":35,"_164":-5},{"_151":165,"_153":154,"_155":156,"_157":166,"_159":160,"_161":162,"_163":35,"_164":-5},{"_151":152,"_153":154,"_155":156,"_157":158,"_159":160,"_161":162,"_163":35,"_164":-5},[6627,6628,6629],{"_180":6632,"_182":193},{"_180":6631,"_182":189},{"_180":6630,"_182":183},{"_184":185,"_95":186,"_122":187},{"_184":190,"_95":186,"_122":191},{"_184":194,"_95":186,"_122":195},{"_300":301,"_302":-5,"_303":-5,"_304":-5,"_305":-5,"_306":-5},[260],{"_260":6641},{"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259},{},[],{"_241":62},{"_239":62,"_240":202},{"_45":262,"_184":263,"_264":6642,"_266":199,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":67,"_278":18,"_279":-5,"_280":-5,"_281":-5,"_282":-5,"_283":-5,"_284":-5,"_163":285,"_286":-5,"_58":6643},{"_292":293,"_45":294,"_95":295,"_296":297,"_298":299},{"_288":18,"_289":18,"_290":18,"_291":18},{"_292":293,"_184":293,"_339":-5,"_296":297,"_45":294},[6646,6647,6648,6649,6650,6651,6652,6653,6654,6655,6656,6657,6658,6659,6660,6661,6662,6663,6664,6665,6666,6667,6668,6669,6670,6671,6672,6673,6674,6675,6676,6677,6678,6679,6680,6681,6682,6683,6684,6685,6686],{"_157":712,"_384":6863},{"_157":401,"_384":6860},{"_157":702,"_384":6857},{"_157":405,"_384":6851},{"_157":405,"_384":6846},{"_157":405,"_384":6841},{"_157":405,"_384":6835},{"_157":405,"_384":6830},{"_157":423,"_384":6825},{"_157":423,"_384":6821},{"_157":405,"_384":6816},{"_157":405,"_384":6813},{"_157":423,"_384":6809},{"_157":405,"_384":6802},{"_157":423,"_384":6798},{"_157":405,"_384":6793},{"_157":405,"_384":6790},{"_157":423,"_384":6786},{"_157":405,"_384":6779},{"_157":423,"_384":6775},{"_157":405,"_384":6770},{"_157":405,"_384":6767},{"_157":405,"_384":6764},{"_157":423,"_384":6760},{"_157":405,"_384":6756},{"_157":405,"_384":6753},{"_157":405,"_384":6746},{"_157":423,"_384":6742},{"_157":405,"_384":6737},{"_157":405,"_384":6734},{"_157":405,"_384":6727},{"_157":423,"_384":6723},{"_157":423,"_384":6719},{"_157":405,"_384":6713},{"_157":405,"_384":6710},{"_157":423,"_384":6706},{"_157":405,"_384":6699},{"_157":423,"_384":6697},{"_157":405,"_384":6692},{"_157":401,"_384":6690},{"_157":383,"_384":6687},{"_386":387,"_90":6688},{"_389":390,"_391":392,"_106":-5,"_45":393,"_394":6689,"_396":397,"_398":399,"_400":116},[],{"_400":6691,"_386":387},{"_95":404},{"_407":6693,"_386":387,"_409":393},{"_410":6694,"_412":-5,"_45":413,"_414":6695,"_416":417,"_99":96,"_95":418},[6696],{"_419":393},{"_49":421,"_95":422},{"_425":426,"_407":6698,"_386":387,"_409":393},{"_45":413,"_416":417,"_49":421,"_95":428},{"_407":6700,"_386":387,"_409":393},{"_431":432,"_45":-5,"_414":6701,"_184":-5,"_434":6702,"_95":436},{"_419":393},{"_317":6703,"_438":-5},[6704,6705],{"_49":443,"_95":442},{"_49":441,"_95":442},{"_425":445,"_407":6707,"_386":387,"_409":393},{"_447":441,"_448":449,"_450":6708,"_452":453,"_391":35,"_454":35,"_45":455,"_456":457,"_458":459,"_400":116,"_95":460},[6709],{"_448":462,"_95":463},{"_407":6711,"_386":387,"_409":393},{"_431":432,"_45":466,"_467":468,"_414":6712,"_184":470,"_471":-5,"_400":116,"_95":472},{"_419":393},{"_407":6714,"_386":387,"_409":393},{"_410":-5,"_475":476,"_45":477,"_414":6715,"_479":6716,"_95":481},{"_419":393},[6717,6718],{"_49":486,"_95":485},{"_49":484,"_95":485},{"_425":488,"_407":6720,"_386":387,"_409":393},{"_410":6721,"_45":477,"_479":6722,"_95":481},[],[486,484],{"_425":493,"_407":6724,"_386":387,"_409":393},{"_447":495,"_448":496,"_450":6725,"_452":498,"_391":499,"_454":35,"_45":500,"_456":501,"_458":459,"_400":116,"_95":460},[6726],{"_448":503,"_95":463},{"_407":6728,"_386":387,"_409":393},{"_431":506,"_45":-5,"_414":6729,"_184":-5,"_434":6730,"_95":436},{"_419":393},{"_317":6731,"_438":-5},[6732,6733],{"_49":512,"_95":442},{"_49":495,"_95":442},{"_407":6735,"_386":387,"_409":393},{"_431":506,"_45":515,"_467":516,"_414":6736,"_184":470,"_471":-5,"_400":116,"_95":472},{"_419":393},{"_407":6738,"_386":387,"_409":393},{"_410":-5,"_475":520,"_45":521,"_414":6739,"_479":6740,"_95":481},{"_419":393},[6741],{"_49":525,"_95":485},{"_425":527,"_407":6743,"_386":387,"_409":393},{"_410":6744,"_45":521,"_479":6745,"_95":481},[],[525],{"_407":6747,"_386":387,"_409":393},{"_431":533,"_45":-5,"_414":6748,"_434":6749,"_95":536},{"_419":393},{"_317":6750,"_438":-5},[6751,6752],{"_49":541,"_95":442},{"_49":540,"_95":442},{"_407":6754,"_386":387,"_409":393},{"_544":545,"_431":533,"_45":546,"_414":6755,"_184":548,"_471":-5,"_95":549},{"_419":393},{"_407":6757,"_386":387,"_409":393},{"_410":-5,"_475":552,"_45":553,"_414":6758,"_479":6759,"_95":481},{"_419":393},[],{"_425":557,"_407":6761,"_386":387,"_409":393},{"_410":6762,"_45":553,"_479":6763,"_95":481},[],[],{"_407":6765,"_386":387,"_409":393},{"_431":563,"_45":-5,"_414":6766,"_184":-5,"_434":565,"_95":436},{"_419":393},{"_407":6768,"_386":387,"_409":393},{"_431":563,"_45":568,"_467":569,"_414":6769,"_184":470,"_471":-5,"_400":116,"_95":472},{"_419":393},{"_407":6771,"_386":387,"_409":393},{"_410":-5,"_475":573,"_45":574,"_414":6772,"_479":6773,"_95":481},{"_419":393},[6774],{"_49":578,"_95":485},{"_425":580,"_407":6776,"_386":387,"_409":393},{"_410":6777,"_45":574,"_479":6778,"_95":481},[],[578],{"_407":6780,"_386":387,"_409":393},{"_431":586,"_45":-5,"_414":6781,"_184":-5,"_434":6782,"_95":436},{"_419":393},{"_317":6783,"_438":-5},[6784,6785],{"_49":443,"_95":442},{"_49":592,"_95":442},{"_425":594,"_407":6787,"_386":387,"_409":393},{"_447":592,"_448":596,"_450":6788,"_452":453,"_391":35,"_454":35,"_45":598,"_456":599,"_458":459,"_400":116,"_95":460},[6789],{"_448":601,"_95":463},{"_407":6791,"_386":387,"_409":393},{"_431":586,"_45":604,"_467":605,"_414":6792,"_184":470,"_471":-5,"_400":116,"_95":472},{"_419":393},{"_407":6794,"_386":387,"_409":393},{"_410":-5,"_475":609,"_45":610,"_414":6795,"_479":6796,"_95":481},{"_419":393},[6797],{"_49":614,"_95":485},{"_425":616,"_407":6799,"_386":387,"_409":393},{"_410":6800,"_45":610,"_479":6801,"_95":481},[],[614],{"_407":6803,"_386":387,"_409":393},{"_431":622,"_45":-5,"_414":6804,"_184":-5,"_434":6805,"_95":436},{"_419":393},{"_317":6806,"_438":-5},[6807,6808],{"_49":629,"_95":442},{"_49":628,"_95":442},{"_425":631,"_407":6810,"_386":387,"_409":393},{"_447":628,"_448":633,"_450":6811,"_452":453,"_391":35,"_454":35,"_45":635,"_456":636,"_458":459,"_400":116,"_95":460},[6812],{"_448":638,"_95":463},{"_407":6814,"_386":387,"_409":393},{"_431":622,"_45":641,"_467":642,"_414":6815,"_184":470,"_471":-5,"_400":116,"_95":472},{"_419":393},{"_407":6817,"_386":387,"_409":393},{"_410":-5,"_475":646,"_45":647,"_414":6818,"_479":6819,"_95":481},{"_419":393},[6820],{"_49":651,"_95":485},{"_425":653,"_407":6822,"_386":387,"_409":393},{"_410":6823,"_45":647,"_479":6824,"_95":481},[],[651],{"_425":658,"_407":6826,"_386":387,"_409":393},{"_660":-5,"_410":6827,"_45":662,"_95":663},[6828],{"_49":665,"_666":6829,"_95":49},[],{"_407":6831,"_386":387,"_409":393},{"_410":6832,"_412":-5,"_45":-5,"_414":6833,"_416":-5,"_99":329,"_95":418},[6834],{"_419":393},{"_49":665,"_95":442},{"_407":6836,"_386":387,"_409":393},{"_410":6837,"_412":-5,"_45":-5,"_414":6838,"_416":-5,"_99":329,"_95":418},[6839,6840],{"_419":393},{"_49":680,"_95":442},{"_49":679,"_95":442},{"_407":6842,"_386":387,"_409":393},{"_410":6843,"_412":-5,"_45":-5,"_414":6844,"_416":-5,"_99":685,"_95":418},[6845],{"_419":393},{"_49":687,"_95":442},{"_407":6847,"_386":387,"_409":393},{"_410":6848,"_412":-5,"_45":-5,"_414":6849,"_416":-5,"_99":685,"_95":418},[6850],{"_419":393},{"_49":693,"_95":442},{"_407":6852,"_386":387,"_409":393},{"_410":6853,"_412":-5,"_45":-5,"_414":6854,"_416":-5,"_99":685,"_95":418},[6855,6856],{"_419":393},{"_49":701,"_95":442},{"_49":700,"_95":442},{"_386":387,"_90":6858},{"_106":-5,"_45":393,"_394":6859,"_396":397,"_398":399,"_400":706},[],{"_400":6861,"_386":387},{"_709":6862,"_95":711},[],{"_714":6864},{"_716":-5,"_717":-5,"_718":719,"_720":399,"_452":453,"_721":18,"_722":-5,"_723":-5,"_724":-5,"_725":726,"_45":387,"_727":728,"_184":-5,"_729":-5,"_164":730,"_731":202,"_732":399,"_733":387,"_458":734,"_400":6865,"_736":-5,"_80":6866,"_738":399},{"_95":404},[],[],[6869],{"_45":743,"_744":6870,"_746":747,"_748":747,"_410":6871,"_400":750,"_412":-5,"_751":35,"_752":6872,"_754":755,"_756":-5},{"_99":329,"_184":-5,"_752":6876},{"_761":49,"_762":6875},{"_757":6873},{"_759":6874},[],[764],{},{"_95":418,"_99":96,"_410":6900},{"_95":773,"_774":6879},[6880,6881,6882,6883,6884],{"_164":6146,"_782":-5,"_783":6897,"_785":-5},{"_164":4338,"_782":-5,"_783":6894,"_785":-5},{"_164":2904,"_782":-5,"_783":6891,"_785":-5},{"_164":999,"_782":-5,"_783":6888,"_785":-5},{"_164":781,"_782":-5,"_783":6885,"_785":-5},[6886],{"_787":788,"_789":790,"_410":6887,"_792":62},[793,794,795,796,202,797,798,799,800,202,801,802,803,804,805,806,807,808,809,810,811,202,812,813,814,815,202,816,817,202,818,819,820,202,821,822,823,824,825,826,827,816,202,828,829,830,202,831,832,820,202,833,814,834,835,836,837,820,202,838,839,840,841,842,843,844,845,846,847,848,849,850,814,851,820,202,852,814,853,854,855,856,857,858,859,860,861,862,863,820,202,864,814,816,202,865,866,202,867,868,869,870,871,872,820,810,202,873,874,873,202,875,876,877,878,879,880,881,882,883,884,885,886,887,844,888,847,889,849,808,202,890,891,845,892,893,894,820,202,895,896,845,897,898,894,820,202,899,900,845,901,902,903,894,820,202,904,905,845,906,907,894,820,202,908,909,845,910,911,894,820,202,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,820,810,202,873,938,873,202,939,940,941,942,943,885,886,887,844,888,847,889,849,808,202,944,945,946,947,948,949,950,894,820,202,951,952,953,925,954,955,956,957,958,894,820,202,959,960,961,962,963,964,925,965,966,967,968,969,970,971,958,894,820,202,972,973,974,975,845,976,977,894,820,202,978,979,980,981,982,983,921,984,985,924,925,926,927,932,934,986,936,937,820,202,987,988,989,990,991,921,992,993,924,925,994,995,996,997,998,936,937,820,810],[6889],{"_787":788,"_789":1002,"_410":6890,"_792":62},[1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1036,1049,1050,1051,1052,202,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1036,1072,1073,1036,202,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,202,1091,1092,1093,1094,1095,1096,1097,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1112,202,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,202,1125,1126,1127,1128,1129,1036,202,1074,1130,1131,1132,1133,1134,1036,202,1074,1135,1136,1137,1138,1139,1140,1141,1142,1143,1144,1145,1146,1147,1148,1036,202,1074,1149,1150,1151,1152,1153,1154,1155,1036,202,1074,1156,1157,1158,1159,1160,1036,202,1074,1161,1162,1163,1164,1146,1165,1166,1036,202,1167,1168,1169,1023,1170,1171,202,1172,1173,1174,1175,1176,1177,1178,1179,1180,1181,1182,1183,1184,1185,1186,1187,1188,1189,202,1190,1191,1192,1193,1194,1195,1196,1197,1198,1199,1200,1201,202,1202,1203,1204,1205,1206,1207,1208,1209,202,1210,1211,1212,202,1213,1214,202,1215,1216,1217,1218,1219,1220,1221,1222,1223,1224,1225,202,1226,1227,1228,1229,1230,1231,1232,202,1233,1234,1235,1236,1237,1238,1239,1240,1241,1242,202,1243,1244,1245,1246,1247,1248,1249,1250,1251,202,1252,1253,1254,1255,1256,1257,1258,1259,1260,1261,1262,1263,1264,1265,202,1266,1267,1268,1269,1270,1271,1036,202,1272,1273,1274,1275,1276,1277,1278,1279,1280,202,1281,1282,1283,1284,1285,202,1286,1287,202,1288,1289,1290,1291,1292,1293,202,1294,1295,1296,1297,1298,1299,1300,202,1301,1302,1303,1304,1305,1306,1307,1308,202,1309,1310,1311,1312,1313,202,1314,1315,1316,1317,1318,1319,202,1320,1321,1322,1323,1324,1325,1326,202,1327,1328,1329,1330,1331,1332,1333,202,1334,1335,1336,1337,1338,1339,1340,1341,1342,202,1343,1344,1345,1346,1347,202,1348,1349,1350,1351,1352,1353,202,1354,1355,1356,1036,202,1272,1357,1358,1359,1360,1361,1081,1362,1363,202,1281,1364,1365,202,1366,1367,1368,1369,202,1370,1371,1372,1373,1374,1375,1376,1377,1378,202,1379,1380,1381,1382,1383,1384,1385,202,1386,1387,1388,1389,1390,1391,1036,202,1272,1392,1393,1394,1395,1396,1397,1398,202,1281,1399,1400,1401,1402,1403,1404,202,1405,1406,1407,1408,202,1409,1289,1291,1292,1410,1411,1412,1413,1414,1415,1416,202,1417,1418,1419,1420,202,1243,1421,1422,202,1354,1423,1424,202,1425,1426,1427,1428,1429,202,1430,1431,1373,1432,1433,1434,1435,1436,1437,1036,202,1272,1438,1439,1440,1441,1442,1443,1444,1445,1446,1447,1448,202,1449,1450,202,1405,1451,1452,1453,202,1172,1454,1455,1456,1457,1458,1459,1460,202,1461,1462,1463,1464,1465,1466,202,1467,1468,1469,1470,1471,1374,202,1472,1473,1036,202,1474,1475,1476,1477,1478,1479,1480,1481,1482,1483,1484,1485,1486,1487,1405,1488,1489,1490,202,1281,1491,1492,1493,1494,1421,1495,1496,1497,1498,1499,1500,1501,1502,1503,202,1504,1505,1506,1507,1508,1509,1510,1511,1512,1513,1514,202,1515,1516,1517,1518,1519,1520,1521,1522,1523,1524,1525,202,1526,1527,1528,1415,1529,1530,1531,1532,1533,1534,1416,1535,202,1536,1537,1289,1538,1292,1539,202,1540,1541,1542,1463,1543,1544,1545,1546,1159,1547,202,1548,1549,1550,1551,1552,1553,1554,202,1555,1468,1556,1557,1558,1374,1559,1458,1459,1460,1036,202,1474,1560,1561,1562,1563,1564,1565,1566,1567,1568,1569,202,1281,1570,1571,1245,1246,202,1405,1572,1573,1574,1575,202,1576,1577,1578,1579,202,1580,1296,1581,1582,1583,1584,1585,1586,1587,1588,202,1589,1590,1591,1592,1593,202,1594,1595,1468,1382,1596,1597,1374,1458,1459,1460,202,1598,1599,1600,1601,1602,1603,1604,1605,1606,1607,1608,1036,202,1474,1609,1610,1611,1612,1613,1614,1615,1616,1081,1617,1618,202,1281,1619,1620,1621,202,1381,202,1622,1382,1383,1384,1623,1624,1625,1626,1627,202,1628,1629,1630,1631,1632,1633,1634,202,1635,1636,1637,1638,1639,1640,1550,1641,1642,1036,202,1474,1643,1644,1645,1646,1647,1648,1649,1650,1651,1652,1081,1653,1654,202,1281,1399,1655,202,1656,1405,1657,1658,1659,202,1294,1295,1462,1660,1298,1299,1661,202,1662,1663,1664,1665,1666,1667,202,1668,1669,202,1670,202,1671,1468,1672,1673,1674,1675,1374,1676,202,1677,1458,1678,1679,1680,1681,1682,202,1683,1684,1685,1686,1687,1688,1689,1690,1691,1692,202,1693,1694,1695,1696,1697,1698,1699,1700,202,1701,1702,1292,1463,1416,1703,202,1704,202,1548,1549,1550,1705,1552,1036,202,1706,1707,1708,1709,1710,1711,1712,1713,1714,1715,1716,1405,1717,1718,1719,202,1720,1721,1722,1723,1724,1725,1726,1727,1728,1729,1730,1731,1732,1733,1734,1735,1736,1737,1738,1739,1740,1741,1742,1743,1744,1745,1746,1747,202,1748,1749,1750,1751,1752,1753,1754,1755,1756,1757,1758,1759,1760,1761,1762,1763,1764,1765,1766,1767,1768,1769,1770,1771,1772,1773,1774,1775,1776,1777,1778,1779,1780,1781,1782,1783,1784,202,1281,1785,1786,1787,1788,1789,1790,1791,1792,1793,1036,202,1706,1707,1794,1795,1796,1797,1798,1799,1800,1801,1802,1803,1804,1805,1806,1807,1808,202,1809,1810,1811,1812,1813,1814,1815,202,1816,1817,1818,1819,202,1820,1821,1822,1823,1458,1824,1825,202,1826,1827,1828,1829,1830,1831,1832,1833,1834,1835,202,1836,1837,1838,202,1839,1840,1841,1842,1843,1844,1845,1846,1847,202,1281,1848,1849,1850,1851,1036,202,1706,1707,1852,1853,1854,1855,1856,202,1281,1857,1858,1859,1860,1861,1862,1863,1864,202,1865,1244,1245,1246,1247,202,1866,1867,1510,1868,1869,1870,1871,202,1872,1873,1874,1875,1876,1877,1878,1459,1680,1879,202,1880,1881,1292,1882,1883,1884,1885,1886,1887,1888,1889,202,1890,1891,1892,1419,202,1893,1894,1431,1556,1895,1896,1373,1435,1436,1437,1036,202,1706,1707,1897,1898,1899,1900,1901,202,1902,1903,1904,1905,1906,1907,1908,202,1281,1909,1910,202,1911,1912,1468,1913,1914,1915,1435,1916,1036,202,1917,1707,1918,1919,1920,1921,1922,1923,1924,1925,1926,1927,1928,202,1405,1929,1930,1931,1932,202,1933,1934,1935,1936,1859,1937,1861,1938,1939,1940,1941,1942,1943,1944,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1955,1940,1956,1957,202,1866,1289,1958,1427,1428,202,1959,1960,1961,1962,1963,1964,1316,1965,1966,1967,1968,1159,1969,202,1970,202,1971,1431,1373,1374,1391,1972,1973,1974,1975,1976,1977,1978,1458,1979,1980,1437,202,1981,1982,1983,1984,1985,1986,1987,1036,202,1917,1707,1988,1989,1990,1991,1992,1993,1994,1995,1996,1997,1427,1428,202,1998,1431,1375,1976,1999,2000,2001,2002,2003,2004,202,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,1036,202,2018,1707,2019,2020,2021,2022,2023,2024,2025,2026,2027,1405,2028,2029,2030,2031,2032,2033,2034,2035,2036,2037,2038,1437,1036,202,2039,1707,2040,2041,2042,2043,2044,2045,1405,2046,2047,2048,2049,202,2050,2051,2052,2053,202,2054,202,2055,2056,2057,2058,2059,2060,2061,2062,2063,2064,2065,2066,2067,2068,2069,2070,2071,2072,2073,2074,1036,202,1706,2075,2076,2077,2078,2079,2080,2081,2082,2083,2084,2085,2086,2087,2088,2089,2090,2091,2092,2093,2094,2095,2096,2097,2098,2099,2100,2101,2102,2103,2104,202,2105,2106,2107,2108,2109,2110,202,2111,2112,2113,2114,2115,202,2116,2117,2118,202,2119,2120,2121,2122,202,2123,2124,2125,2126,2127,2128,2129,2130,2131,2132,2133,202,2134,2135,2136,2137,2138,202,2139,2140,2141,2142,202,2143,2144,2145,2146,2147,2148,2149,2150,2151,202,2152,2153,2154,202,2155,2156,2157,2158,2159,2160,2161,2162,202,2163,2164,2165,2166,2167,2168,2169,2170,2171,2172,2173,2174,2175,2176,2177,2178,2179,2180,2181,2182,2183,2184,2185,2186,2187,2188,2189,2190,2191,2192,2193,2194,2195,2196,2197,2198,2199,2200,2201,2202,2203,202,2204,2205,2206,2207,2208,2209,2210,2211,2212,2213,2214,2215,2216,2217,1036,202,2218,2219,2220,2221,2222,2223,2224,2225,2226,2227,2228,2229,2230,2231,2232,2233,2234,2235,2236,2237,2238,202,2239,2240,2241,2242,2243,2244,2245,2246,2247,2248,2249,2250,2251,2252,2253,2254,2255,2256,2257,2258,2259,2260,2261,202,2262,2263,2264,2265,2266,2267,2268,2269,2270,2271,2272,2273,2274,2275,202,2276,2277,2278,2279,2280,2281,2282,2283,2284,2285,2286,2287,2288,2289,2290,2291,2292,2293,2294,2295,2296,2297,2298,2299,2300,2301,2302,2303,2304,2305,2306,2307,2308,2309,2310,202,2311,2312,2313,2314,2315,2316,2317,2318,2319,2320,202,2321,2322,2323,2324,2325,2326,2327,2328,2329,2330,2331,2332,2333,2334,2335,2336,2337,2338,2339,2340,2341,2342,2343,2344,2345,2346,2347,2348,2349,2350,2351,2352,2353,202,2354,2355,2356,2357,2358,2359,2360,2361,2362,2363,2364,2365,2366,2367,2368,2369,2370,2371,2372,2373,2374,2375,2376,2377,2378,2379,2380,2381,2382,2383,2384,2385,2386,2387,2388,2389,2390,2391,2392,2393,2394,202,2395,2396,2397,2398,2399,2400,2401,2402,2403,2404,2405,2406,2407,2408,2409,2410,2411,2412,2413,2414,2415,2416,2417,2418,2419,2420,2421,2422,2423,2424,2425,2426,2427,2428,2429,2430,2431,2432,2433,2434,2435,2436,2437,2438,2439,2440,2441,2442,2443,2444,202,2445,2446,2447,2448,2449,2450,2451,2452,2453,2454,2455,2456,2457,2458,202,2459,2460,2461,2462,2463,2464,2465,2466,2467,2468,2469,2470,202,2471,2472,2473,2474,2475,2476,2477,2478,2479,2480,202,2481,2482,2483,2484,2485,2486,2487,2488,2489,2490,2491,2492,2493,202,2494,2495,2496,2497,2498,2499,2500,2501,2502,2503,2504,2505,2506,2507,2508,2509,2510,2511,2512,2513,202,2514,2515,2516,2517,2518,2519,2520,2521,2522,2523,2524,2525,202,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2536,2537,2538,2539,2540,2541,2542,2543,2544,2545,2546,2547,2548,2549,2550,202,2551,2552,2553,2554,2555,2556,2557,2558,2559,202,2560,2561,2562,2563,2564,2565,2566,2567,2568,2569,2570,2571,2572,202,2573,2574,2575,2576,2577,2578,2579,2580,2581,2582,2583,2584,2585,202,2586,2587,2588,2589,2590,2591,202,2592,2593,2594,2595,2596,2597,2598,2599,2600,2601,202,2602,2603,2604,2605,2606,2607,2608,2609,2610,2611,2612,2613,2614,2615,2616,2617,2618,2619,2620,2621,2622,2623,2624,2625,2626,2627,2628,2629,2630,2631,2632,2633,2634,2635,2636,202,2637,2638,2639,2640,2641,2642,2643,2644,2645,202,2646,2647,2648,2649,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2661,2662,2663,2664,2665,2666,2667,2668,2669,202,2670,2671,2672,2673,2674,2675,2676,2677,202,2678,2679,202,2680,2681,202,2682,2683,2684,2685,202,2686,2687,2688,2689,202,2690,2691,2692,2693,2694,202,2695,2696,2697,2698,2699,2700,202,2701,2702,2703,2704,2705,202,2706,2707,2708,2709,2710,2711,202,2712,2713,2714,2715,2716,2717,202,2718,2719,2720,2721,2722,2723,2724,202,2725,2726,2727,2728,2729,2730,2731,2732,2733,2734,2735,202,2736,2737,2738,2739,202,2740,2741,2742,2743,2744,2745,2746,2747,2748,2749,202,2750,2751,2752,2753,2754,2755,2756,202,2757,2758,2759,2760,2761,2762,202,2763,2764,2765,2766,2767,2768,202,2296,2769,2770,2771,2772,2773,2774,202,2775,2776,2777,2778,2779,202,2780,2781,202,2782,2783,2784,2785,202,2786,2787,202,2788,2789,2790,2791,202,2792,2793,2794,2795,202,2796,2797,202,2798,2799,2800,2801,202,2802,2803,2804,2805,202,2806,2807,202,2808,2809,2810,2811,2812,202,2813,2814,2815,2816,202,2817,2818,2819,2820,202,2821,2822,2823,2824,202,2825,2826,2827,2828,202,2829,2830,2831,2832,202,2833,2834,202,2835,2836,2837,2838,202,2839,2840,2841,202,2842,2843,2844,2845,202,2846,2847,2848,2849,202,2850,2851,2852,2853,202,2854,2855,2856,202,2857,2858,2859,2860,2861,202,2862,2863,2864,2865,202,2866,2867,2868,2869,202,2870,2871,2872,2873,202,2874,2875,2876,2877,2878,202,2879,2880,2881,2882,2883,2884,202,2885,2886,2887,2888,2889,2890,202,2891,2892,2893,2894,202,2895,2896,2897,2898,2899,202,2900,2901,2902,1036,2903],[6892],{"_787":788,"_789":2907,"_410":6893,"_792":62},[1004,1005,2909,2910,2911,2912,1015,2913,2914,2915,2916,2917,2918,2919,2920,2921,1025,2922,2923,2924,2925,2926,2927,2928,2929,2930,2931,1036,1037,1038,2932,2933,2934,2935,2936,1044,2937,2938,1047,2939,1036,1049,2940,2941,2942,202,1053,1054,1055,2943,2944,2945,1062,2946,2947,2948,2949,2950,2951,2952,2953,2954,1036,1072,2955,1036,202,1074,2956,1076,2957,2958,2959,1082,1083,2960,2961,2962,2963,2964,2965,2966,202,1091,2967,2968,2969,2970,2971,2972,2973,2974,2975,2976,2977,2978,2979,2980,2981,2982,2983,2984,1110,1111,2985,202,1113,2986,2987,2988,1117,2989,2990,1120,2991,2992,2993,1124,202,1125,2994,2995,2996,2997,1036,202,1074,2998,1131,1132,2999,3000,1036,202,1074,3001,1136,3002,1138,3003,3004,3005,3006,1143,3007,3008,3009,3010,3011,1036,202,1074,3012,1151,3013,3014,3015,3016,1036,202,1074,3017,3018,1158,3019,3020,1036,202,1074,3021,1162,1163,3022,3009,3023,3024,1036,202,1167,1168,3025,2920,3026,3027,202,1172,3028,3029,3030,3031,3032,3033,3034,3035,3036,1182,3037,3038,3039,3040,3041,3042,3043,202,1190,3044,3045,3046,3047,3048,3049,3050,3051,3052,3053,3054,202,1202,3055,3056,3057,3058,3059,3060,3061,202,1210,3062,3063,202,1213,3064,202,1215,3065,3066,3067,3068,3069,3070,3071,3072,3073,202,1226,3074,3075,3076,3077,3078,3079,202,1233,3080,3081,3082,3083,3084,3085,3086,1241,3087,202,1243,3088,3089,3090,3091,3092,3093,3094,3095,202,1252,3096,1254,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,202,1266,3108,3109,3110,3111,3112,1036,202,1272,3113,1274,1275,1276,1277,1278,1279,3114,202,1281,3115,1283,3116,3117,202,1286,3118,202,1288,3119,3120,3121,3122,3123,202,1294,3124,3125,3126,3127,3128,3129,202,1301,1302,3130,3131,1306,3132,3133,202,1309,3134,3135,3136,3137,202,1314,3138,3139,3140,3141,3142,202,1320,1321,3143,3144,1325,3145,202,1327,3146,1329,3147,3148,3149,3150,202,1334,3151,3152,3153,3154,3155,3156,3157,3158,202,1343,3159,3160,3161,3162,202,1348,3163,1350,3164,3165,3166,202,1354,3167,3168,1036,202,1272,3169,1358,3170,3171,1362,3172,202,1281,3173,3174,202,1366,3175,3176,3177,202,1370,3178,3179,3180,3181,3182,3183,1977,3184,202,1379,3185,3186,1382,3187,3188,3189,202,1386,3190,3191,1389,3192,3193,1036,202,1272,3194,1393,1394,1395,1396,1397,3195,202,1281,3196,3197,3198,1402,3199,3200,202,1405,3201,3202,3203,202,1409,3119,3121,3122,3204,3205,3206,3207,3208,3209,3210,202,1417,3211,3212,3213,202,1243,3214,3215,202,1354,3216,3217,202,1425,3218,3219,3220,3221,202,1430,3222,3180,3223,3224,3225,3226,3227,3228,1036,202,1272,3229,1439,1440,1441,1442,1443,1446,3230,3231,202,1449,3232,202,1405,3233,3234,3235,202,1172,3236,3237,3238,3239,3240,3241,3242,202,1461,3243,3244,3245,3246,3247,202,1467,3248,3249,3250,3251,3181,202,1472,3252,1036,202,1474,3253,1476,1477,1478,1479,1480,1481,1482,3254,3255,3256,1486,3257,1405,3258,3259,3260,202,1281,3261,3262,3263,3264,3214,3265,1496,3266,3267,1499,3268,3269,3270,3271,202,1504,3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,202,1515,3282,3283,3284,3285,1520,3286,3287,3288,3289,3290,202,1526,3291,3292,3209,3293,3294,3295,3296,3297,3298,3210,3299,202,1536,3300,3119,3301,3122,3302,202,1540,3303,1542,3244,3304,3305,3306,3307,3019,3308,202,1548,3309,3310,3311,3312,3313,3314,202,1555,3248,3315,3316,3317,3181,3318,3240,3241,3242,1036,202,1474,3319,1561,1562,3320,3321,3322,3323,1568,3324,202,1281,3325,3326,3089,3090,202,1405,3327,3328,3329,3330,202,1576,3331,3332,3333,202,1580,3125,1581,3334,3335,3336,3337,3338,3339,3340,202,1589,3341,3342,3343,3344,202,1594,3345,3248,1382,3346,3347,3181,3240,3241,3242,202,1598,3348,1600,3349,3350,3351,3352,3353,3354,3355,1036,202,1474,3356,1610,1611,1612,1613,3357,1617,3358,202,1281,3359,3360,3361,202,3186,202,1622,1382,3187,3188,3362,3363,1625,3364,3365,202,1628,3366,3367,3368,3369,3370,3371,202,1635,3372,1637,3373,3374,3375,3310,3376,3377,1036,202,1474,3378,1644,1645,1646,1647,1648,3379,1653,3380,202,1281,3196,3381,202,3382,1405,3383,3384,3385,202,1294,3124,3243,3386,3127,3128,3387,202,1662,3388,3389,3390,3391,3392,202,1668,3393,202,3394,202,1671,3248,3395,3396,1674,3397,3181,3398,202,1677,3240,3399,3400,3401,3402,3403,202,1683,3404,1685,3405,3406,3407,3408,1690,3409,3410,202,1693,3411,3412,1696,3413,3414,3415,3416,202,1701,3417,3122,3244,3210,3418,202,3419,202,1548,3309,3310,3420,3312,1036,202,1706,3421,1708,1709,1710,1715,3422,1405,3423,3424,3425,202,1720,3426,3427,3428,3429,3430,3431,3432,3433,1729,3434,3435,3436,1733,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,1744,3447,3448,3449,202,1748,3450,3451,3452,1752,3453,3454,3455,3456,1758,3457,3458,3459,3460,3461,3462,3463,1767,3464,3465,3466,3467,3468,3469,3470,3471,3472,3473,1778,3474,3475,3476,3477,3478,3479,202,1281,1785,3480,3481,1788,3482,3483,1791,3484,3485,3486,1036,202,1706,3421,1794,1795,1799,3487,3488,1802,3489,3490,3491,3492,3493,202,1809,3494,3495,3496,3497,3498,3499,202,3500,3501,3502,3503,202,1820,3504,3505,3506,3240,3507,3508,202,1826,3509,1828,3510,3511,3512,3513,3514,3515,202,1836,3516,3517,202,1839,3518,1841,3519,3520,3521,3522,3523,3524,202,1281,3525,3526,3527,3528,1036,202,1706,3421,1852,1853,1854,1855,3529,202,1281,3530,3531,1859,3532,3533,3534,3535,3536,202,1865,3088,3089,3090,3091,202,1866,3537,3277,3538,3539,3540,3541,202,1872,3542,3543,3544,3545,3546,3547,3241,3401,3548,202,1880,3549,3122,3550,3551,3552,3553,3554,3555,3556,3557,202,1890,3558,3559,3212,202,1893,3560,3222,3315,3561,3562,3180,3226,3227,3228,1036,202,1706,3421,1897,1898,1899,3563,3564,202,1902,3565,3566,3567,3568,3569,3570,202,1281,3571,3572,202,1911,3573,3248,3574,3575,3576,3226,3577,1036,202,1917,3421,1918,1919,3578,3579,3580,3581,1926,3582,3583,202,1405,3584,3585,3586,3587,202,1933,3588,3589,3590,1859,3591,3592,3593,1939,3594,3595,1942,3596,3597,3598,3599,1947,3600,3601,3602,3603,3604,3605,3606,3607,1955,3594,3608,3609,202,1866,3119,3610,3219,3220,202,1959,3611,3612,1962,3613,3138,3614,3140,3141,3615,3616,3019,3617,202,3618,202,1971,3222,3180,3181,3193,1972,1973,3619,3620,3621,1977,3622,3240,3623,3624,3228,202,1981,3625,3626,3627,3628,3629,3630,1036,202,1917,3421,1988,1989,3631,1996,3632,3219,3220,202,3633,3222,3182,3621,3634,3635,3636,3637,3638,3639,202,3640,3641,2007,3642,3643,2010,3644,3645,3646,3647,2015,3648,3649,1036,202,2018,3421,2019,2020,3650,2026,3651,1405,3652,3653,3654,3655,3656,3657,3658,3659,2036,3660,3661,3228,1036,202,2039,3421,3662,3663,3664,3665,2044,3666,1405,3667,3668,3669,3670,202,3671,3672,3673,3674,202,3675,202,3676,3677,3678,3679,3680,3681,3682,3683,3684,3685,3686,3687,3688,3689,3690,3691,3692,3693,3694,3695,1036,202,1706,3696,2076,2077,2078,2079,2080,2081,2082,2083,2090,2091,3697,3698,3699,3700,3701,3702,3703,3704,3705,3706,3707,3708,3709,202,2105,3710,3711,3712,3713,3714,202,2111,3715,3716,3717,3718,202,2116,2117,2118,202,2119,3719,3720,3721,202,2123,3722,2125,3723,3724,3725,3726,3727,3728,3729,3730,202,2134,3731,3732,3733,3734,202,2139,3735,3736,3737,202,2143,3738,3739,3740,3741,3742,3743,3744,3745,202,2152,3746,3747,202,2155,3748,2157,2158,3749,3750,3751,3752,202,2163,2164,2165,2166,3753,3754,3755,3756,3757,3758,3759,3760,3761,3762,3763,3764,3765,3766,3767,3768,3769,3770,3771,3772,3773,3774,3775,3776,3777,3778,3779,3780,3781,3782,3783,3784,202,3785,3786,3787,3788,3789,3790,3791,3792,3793,3794,3795,3796,3797,3798,1036,202,2218,2219,3799,3800,3801,3802,3803,3804,3805,3806,3807,2233,3808,3809,3810,3811,3812,202,3813,3814,3815,3816,3817,3818,3819,3820,3821,3822,3823,3824,3825,3826,3827,3828,3829,3830,3831,3832,3833,3834,3835,202,3836,2263,3837,3838,2265,3839,3840,3841,3842,2270,3843,3844,3845,3846,3847,202,3848,2277,3849,3850,3851,2280,3852,3853,3854,3855,3856,2286,3857,3858,3859,3860,2291,3861,3862,3863,3864,2296,2297,3865,3866,3867,3868,3869,2303,3870,3871,3872,3873,3874,3875,3876,202,3877,2312,3878,3879,3880,3881,3882,3883,3884,202,3885,2322,3886,3887,3888,3889,3890,2329,3891,3892,3893,3894,2334,3895,3896,3897,2338,3898,3899,3900,3901,3902,3903,3904,2347,3905,3906,3907,3908,3909,3910,202,3911,2355,3912,3913,3914,3915,2360,3916,3917,3918,3919,3920,2366,3921,3922,3923,3924,2372,3925,3926,3927,2376,3928,3929,3930,3931,2381,3932,3933,3934,3935,3936,3937,2389,3938,3939,3940,3941,3942,202,3943,2396,3944,3945,3946,3947,2401,3948,3949,3950,2405,3951,3952,3953,3954,3955,2410,3956,3957,3958,2414,3959,3960,3961,2418,3962,3963,3964,3965,2423,3966,3967,3968,2427,3969,3970,3971,3972,3973,3974,3975,2436,3976,3977,3978,3979,2442,3980,3981,202,3982,2446,3983,3984,3985,3986,2451,3987,3988,3989,2456,3990,3991,202,3992,2460,3993,3994,3995,2464,3996,3997,3998,3999,4000,202,4001,2472,4002,4003,4004,2477,4005,4006,4007,202,4008,2482,4009,4010,4011,4012,2487,4013,4014,4015,4016,4017,202,4018,2495,4019,4020,4021,2499,4022,4023,4024,4025,2504,4026,4027,2507,4028,4029,4030,2511,4031,4032,202,4033,2515,4034,4035,2518,4036,4037,4038,4039,2523,4040,4041,202,4042,2527,4043,4044,4045,4046,4047,4048,2534,4049,4050,2537,4051,4052,4053,4054,4055,2543,4056,4057,4058,4059,4060,4061,202,4062,2552,4063,4064,4065,4066,2556,4067,4068,4069,202,4070,2561,4071,4072,4073,4074,2566,4075,4076,4077,2570,4078,4079,202,4080,2574,4081,4082,4083,2578,4084,4085,4086,2582,4087,4088,4089,202,4090,2587,4091,4092,4093,4094,202,4095,2593,4096,4097,4098,4099,2599,4100,4101,202,4102,2603,4103,4104,4105,4106,4107,4108,4109,2611,4110,4111,4112,4113,4114,4115,4116,2619,4117,4118,4119,4120,2624,4121,4122,4123,4124,4125,4126,2631,4127,4128,4129,4130,202,4131,2638,4132,4133,4134,2642,4135,4136,4137,202,4138,2647,4139,4140,4141,4142,2652,4143,4144,4145,2656,4146,4147,4148,2660,4149,4150,4151,4152,2665,4153,4154,4155,4156,202,4157,2671,4158,4159,4160,4161,4162,4163,202,4164,4165,202,4166,4167,202,4168,2683,4169,4170,202,4171,2687,4172,4173,202,4174,2691,4175,4176,4177,202,4178,2696,4179,4180,4181,4182,202,4183,2702,4184,4185,4039,202,4186,2707,4187,4188,4189,4190,202,4191,2713,4192,4193,4194,4195,202,4196,2719,4197,4198,4199,4200,4201,202,2725,4202,4203,4204,4205,4206,4207,202,4208,2737,4209,4210,202,4211,2741,4212,4213,4214,4215,4216,4217,4218,4116,202,4219,2751,4220,4221,4222,4223,4224,202,4225,2758,4226,4227,4228,4229,202,4230,2764,4231,4232,4233,202,2296,4234,2770,4235,4236,4237,4238,202,4239,2776,4240,4241,4242,4243,202,4244,4245,202,4246,2783,4247,4248,202,2786,4249,4250,4251,202,4252,2789,4253,4254,202,2792,2793,4255,4256,202,4257,4258,4259,202,4260,2799,4261,202,4262,2803,4263,202,4264,4265,202,4266,2809,4267,4268,4269,202,4270,2814,4271,4272,202,4273,2818,4274,4275,202,4276,2822,4277,4278,202,4279,2826,4280,202,4281,2830,4282,4283,202,4284,4285,202,4286,2836,4287,4288,202,4289,2840,4290,202,4291,2843,4292,4293,202,4294,2847,4295,4296,202,4297,2851,4298,202,4299,2855,4300,202,4301,2858,4302,4303,4304,202,4305,2863,4306,4307,202,4308,2867,4309,4310,4311,202,4312,2871,4313,4314,202,4315,2875,4316,4317,4318,4319,202,4320,2880,4321,4322,4323,202,4324,2886,4325,4326,4327,4328,202,4329,2892,4330,4331,202,4332,2896,4333,4334,4335,202,2900,4336,4337,1036,2903],[6895],{"_787":788,"_789":4341,"_410":6896,"_792":62},[4343,4344,4345,4346,4347,1015,4348,4349,4350,4351,4352,4353,4354,4355,4356,4357,4358,1025,4359,4360,4361,4362,4363,4364,4365,4366,4367,2931,1036,1037,1038,1039,1040,4368,4369,4370,1044,4371,4372,4373,4374,4375,1036,1049,4376,4377,4378,202,4379,4380,1059,4381,4382,4383,4384,4385,4386,4387,4388,1062,4389,4390,4391,4392,4393,4394,4395,4396,4397,4398,4399,4400,4401,4402,1036,4403,4404,4405,1072,4406,1036,4407,4408,4409,4410,4411,4412,4413,1082,1083,1084,4414,4415,1087,1088,4416,4417,202,1091,1092,4418,4419,4420,4421,1097,4422,4423,1100,4424,4425,4426,4427,4428,4429,1107,1108,1109,4430,4431,4432,4433,4434,202,1113,4435,4436,4437,1117,4438,1120,4439,4440,4441,4442,4443,1124,202,1125,4444,4445,1128,4446,1036,4447,4448,4449,4450,4451,1132,4452,4453,4454,4455,4456,1036,1136,4457,1138,4458,1143,4459,4460,4461,4462,1036,4463,4464,4465,4466,4467,1151,4468,4469,1154,1155,1036,1158,4470,4471,1036,4472,4473,4474,1163,4475,4460,4476,4477,1036,4478,1167,1168,4479,4355,4480,4481,202,1172,4482,4483,4484,4485,4486,4487,4488,4489,4490,1182,4491,4492,4493,4494,4495,4496,4497,4498,4499,202,1190,4500,4501,4502,4503,4504,4505,4506,4507,4508,4509,4510,202,1202,4511,4512,4513,4514,1207,4515,3061,202,1210,4516,4517,202,4518,4519,4520,4521,4522,202,1215,4523,4524,1222,1223,4525,1225,202,1226,1227,4526,1229,4527,4528,4529,202,1233,4530,4531,4532,4533,3084,4534,4535,1241,4536,202,1243,4537,4538,4539,4540,4541,4542,4543,4544,202,1252,4545,1254,4546,4547,4548,4549,4550,4551,4552,4553,4554,4555,4556,202,1266,4557,4558,4559,4560,4561,1036,4562,4563,4564,4565,4566,4567,1279,4568,202,4569,4570,4571,1283,4572,202,4573,4574,202,1288,4575,4576,4577,4578,4579,202,4580,4581,4582,4583,4584,4585,4586,202,4587,4588,4589,1302,4590,4591,1306,4592,4593,202,4594,4595,4596,4597,4598,202,4599,4600,4601,4602,4603,4604,4605,4606,202,1320,1321,4607,4608,1325,4609,202,4610,4611,1329,4612,4613,4614,4615,202,1334,4616,4617,4618,4619,4620,4621,4622,4623,202,1343,4624,4625,4626,4627,202,1348,4628,1350,4629,4630,4631,202,1354,4632,4633,1036,4634,4635,4636,4637,4638,4639,4640,4641,4642,4643,4644,4645,1362,1363,202,4646,4647,4648,4649,4650,4651,202,1366,4652,4653,4654,202,1370,4655,4656,4657,4658,4659,4660,4661,4662,4663,202,1379,1380,4664,4665,1383,1384,4666,202,1386,4667,4668,4669,1390,3193,1036,4670,4671,4672,4673,4674,4675,4676,4677,4678,4679,4680,1397,4681,202,4569,4570,4682,4683,4684,1402,4685,202,1405,4686,4687,4688,202,1409,4575,4577,4578,4689,4690,4691,4692,4693,4694,4695,4696,4697,202,1417,4698,4699,4700,202,1243,4701,4702,202,1354,4703,4704,202,1425,4705,4706,4707,4708,202,1430,4709,4657,4710,4711,4712,4713,4714,4715,1036,4716,4717,4672,4718,4719,4720,4721,4722,4723,4724,3323,1446,4725,4726,4727,4728,4729,4730,4731,202,4646,4732,4733,202,1405,4734,4735,4736,202,4737,4738,4739,4740,4741,4742,4743,4744,4745,4746,4747,4748,202,4749,4750,4751,1464,4752,4753,4754,4755,4756,202,4757,4758,4759,4760,1470,4761,4658,202,4762,4763,4764,1036,4765,4766,4563,4767,4768,4769,4770,4771,4772,4773,4774,4775,4776,4777,4778,4779,4780,4781,4782,4783,4784,4785,1486,4786,1405,4787,4788,202,4569,4570,4789,4790,4791,4792,4701,4793,4794,4795,4796,4797,202,1504,4798,4799,4800,4801,4802,4803,4804,4805,4806,4807,202,1515,4808,4809,4810,4811,4812,4813,4814,4815,1520,4816,4817,4818,4819,4820,202,1526,4821,4822,4823,4824,4696,4825,4826,4827,4828,4829,1534,4697,4830,202,1536,4831,4575,4832,4578,4833,202,4834,4835,4836,4837,4838,4751,4839,4840,4841,4842,4470,4843,202,1548,4844,4845,4846,4847,4848,4849,202,1555,4759,4850,4851,4852,4658,4853,4746,4747,4748,1036,4854,4855,4856,4672,4857,4858,4859,4860,4861,4862,4863,4864,4865,1568,4866,202,4867,4868,4570,4869,4870,4538,4539,202,1405,4871,4872,4873,202,4874,4875,4876,4740,4877,4878,4879,202,4880,4881,4582,4882,4883,4884,4885,4886,4887,4888,4889,4890,4891,4892,4893,202,4894,4895,4896,4897,4898,4899,4900,4901,4902,4903,4904,4905,202,4906,4907,4908,4909,4759,4665,4910,4911,4912,4913,4658,4914,4915,4746,4747,4748,202,1598,4916,1600,4917,4918,4919,4920,4921,4922,4923,1036,4924,4925,4926,4927,4928,4929,4930,4931,4932,4933,4934,4935,4936,1617,1618,202,4937,4570,4938,4939,4940,202,4664,202,1622,4665,4941,4942,4943,1383,1384,4944,4945,4946,4947,1625,4948,4949,202,1628,4950,4951,4952,4953,1633,4954,202,4955,4956,4957,4958,1637,4959,4960,4961,4845,4962,4963,1036,4964,4965,4966,4967,4672,4968,4969,4769,4970,4971,4972,4973,4974,4975,4976,4977,4978,4979,4980,1653,4981,202,4982,4570,4682,4983,202,4984,1405,4985,4986,202,4580,4581,4750,4987,4584,4988,4989,4990,4585,4991,202,4992,4993,4994,4995,4996,4997,202,4998,4999,5000,202,5001,202,5002,5003,4908,4759,5004,5005,5006,5007,4658,5008,5009,5010,202,5011,5012,5013,5014,4746,5015,5016,5017,5018,5019,202,5020,5021,5022,1685,5023,5024,5025,1690,5026,5027,202,5028,5029,5030,1696,5031,5032,5033,202,5034,5035,5036,5037,4578,4751,4697,5038,202,5039,202,5040,5041,5042,4844,4845,5043,4847,1036,5044,5045,4563,5046,5047,1081,5048,5049,5050,5051,5052,5053,5054,5048,5055,5056,5057,5058,5059,5060,5061,5062,1715,5063,1405,5064,5065,5066,202,1720,1721,5067,5068,5069,5070,5071,5072,5073,5074,5075,1729,5076,5077,5078,5079,5080,1733,5081,5082,5083,5084,5085,5086,5087,5088,5089,5090,5091,1744,5092,5093,5094,202,1748,1749,5095,5096,1752,5097,5098,1756,1757,5099,1758,5100,5101,5102,5103,5104,5105,5106,5107,5108,5109,1767,5110,5111,5112,5113,5114,5115,1772,1773,5116,5117,5118,5119,1778,5120,5121,5122,5123,5124,202,5125,4732,1785,5126,5127,1788,5128,5129,1791,5130,5131,1036,5132,5133,4563,5046,5134,5135,5048,5136,5137,5138,5139,5140,5141,5142,5143,5144,1799,5145,5146,1802,5147,5148,5149,5150,5151,202,1809,1810,5152,5153,5154,5155,5156,5157,5158,202,5159,5160,5161,5162,5163,5164,202,1820,1821,5165,5166,4746,1824,5167,202,5168,5169,5170,1828,5171,5172,5173,5174,5175,5176,202,5177,5178,5179,202,5180,5181,1841,5182,5183,5184,5185,5186,202,5125,5187,5188,5189,5190,5191,5192,5193,1036,5194,5195,5196,4563,5046,5197,4467,5048,5198,5199,5200,5201,5202,5203,5204,5205,5206,5207,5048,5208,5209,5210,5211,5212,1855,5213,202,5125,4732,5214,5215,5216,5217,1859,5218,5219,5220,5221,5222,5223,202,5224,5225,5226,4537,4538,4539,4540,202,1866,5227,5228,5229,4803,5230,5231,5232,5233,5234,5235,202,1872,5236,5237,5238,5239,5240,5241,5242,5243,4747,5017,5244,202,1880,5245,5246,5247,5248,5249,5250,5251,5252,5253,5254,5255,5256,202,5257,5258,5259,5260,4699,202,1893,5261,4709,4850,5262,4710,4657,4713,4714,4715,1036,5263,5264,5265,4672,5266,5267,5268,5048,5269,5270,5271,5272,5273,5274,5275,5276,1899,5277,5278,202,1902,5279,5280,1905,1906,5281,5282,202,5283,4570,5284,5285,202,1911,5286,4759,5287,1914,1915,4713,5288,1036,5289,5290,5291,4563,5046,5292,5293,5048,5294,5295,5296,5297,5298,5299,5300,5301,5302,5303,5304,5048,5305,5306,5307,5308,5309,5048,5310,5311,5312,5313,5314,5315,5316,5317,1926,5318,5319,5320,5321,5322,5323,202,1405,5324,5325,5326,202,4569,5327,5328,5329,5330,5331,5332,1933,5333,5334,5335,1859,5336,5337,5338,5339,5340,1939,5341,5342,1942,5343,5344,5345,5346,5347,5348,1947,5349,5350,5351,5352,5353,5354,1955,5341,5355,5356,202,1866,4575,5357,4706,4707,202,5358,5359,5360,5361,5362,5363,1962,5364,4602,4603,4604,4605,5365,5366,5367,5368,5369,5370,4470,5371,202,5372,202,1971,4709,4657,4658,3193,5373,4661,5374,5375,5376,4746,5377,5378,4715,202,5379,5380,5381,5382,5383,5384,5385,5386,1987,1036,5387,5388,5389,5390,5391,5048,5392,5393,5394,5395,5396,5397,5398,5399,5400,5401,5402,1996,5403,4706,4707,202,5404,4709,4659,5373,5405,5406,2001,2002,5407,5408,202,5409,5410,5411,5412,2007,5413,5414,5415,5416,5417,5418,5419,3645,5420,5421,5422,5423,5424,5425,5426,2015,5427,5428,1036,5429,5430,5431,5432,5433,5434,5435,5436,5437,5438,2026,5439,1405,5440,5441,5442,5443,5444,5445,5446,5447,5448,5449,5450,4715,1036,5451,5452,5453,5454,5455,5456,5457,5458,5459,5460,2044,2045,1405,5461,5462,5463,202,5464,5465,5466,5467,5468,5469,5470,202,5471,202,5472,5473,5474,5475,5476,5477,5478,5479,5480,5481,5482,5483,5484,5485,5486,5487,5488,5489,5490,5491,5492,5493,5494,5495,5496,5497,5498,5499,5500,1036,5501,5502,5503,5504,5505,5506,5507,5048,5508,5509,5510,5511,5512,5513,5514,5515,5516,5517,5518,5519,5520,5521,5522,5523,5524,2090,5525,5526,5527,5528,2094,5529,5530,5531,5532,5533,5534,5535,5536,5537,5538,202,5539,5540,5541,5542,5543,2107,2108,5544,2110,202,5545,5546,3716,5547,5548,202,5549,5550,2117,2118,202,5551,5552,5553,2122,202,5554,5555,2124,5556,5557,5558,5559,2129,5560,5561,5562,5563,202,5564,5565,5566,5567,5568,5569,5570,202,5571,5572,5573,5574,5575,5576,202,5577,5578,5579,5580,5581,5582,5583,5584,2150,5585,202,5586,5587,3747,202,5588,5589,5590,5591,5592,5593,5594,5595,202,5596,5597,5598,5599,5600,5601,5602,5603,5604,5605,5606,5607,5608,5609,5610,5611,5612,5613,5614,5615,5616,5617,5618,5619,5620,5621,5622,5623,5624,5625,5626,5627,5628,5629,5630,5631,5632,202,5633,2204,5634,5635,5636,5637,5638,5639,5640,5641,5642,5643,5644,2216,5645,1036,202,5646,5647,5648,5649,5650,5651,5652,2233,5653,5654,5655,5656,5657,202,5658,5659,5660,5661,5662,5663,5664,5665,5666,5667,5668,5669,5670,5671,2248,5672,5673,5674,5675,5676,2254,5677,5678,5679,5680,5681,5682,2261,202,5683,5684,2263,5685,2265,5686,5687,5688,2270,5689,5690,5691,5692,202,5693,5694,2277,5695,5696,2280,5697,5698,5699,5700,2286,5701,5702,5703,2291,5704,5705,5706,5707,5708,5709,2297,5710,5711,5712,5713,2303,5714,5715,5716,5717,5718,5719,202,5720,5721,2312,5722,5723,5724,5725,5726,5727,202,5728,5729,2322,5730,5731,5732,5733,2329,5734,5735,5736,2334,5737,5738,5739,2338,5740,5741,5742,5743,5744,5745,2347,5746,5747,5748,5749,5750,202,5751,5752,2355,5753,5754,5755,5756,2360,5757,5758,5759,5760,2366,5761,5762,5763,5764,2372,5765,5766,5767,2376,5768,5769,5770,2381,5771,5772,5773,5774,5775,5776,2389,5777,5778,5779,5780,202,5781,5782,2396,5783,5784,5785,5786,2401,5787,5788,5789,2405,5790,5791,5792,5793,2410,5794,5795,2414,5796,5797,2418,5798,5799,5800,2423,5801,5802,2427,5803,5804,5805,5806,5807,5808,2436,5809,5810,5811,5812,2442,5813,202,5814,5815,2446,5816,5817,5818,5819,2451,5820,5821,5822,2456,5823,5824,202,5825,5826,2460,5827,5828,5829,2464,5830,5831,5832,5833,5834,202,5835,5836,2472,5837,5838,5839,2477,5840,5841,202,5842,2481,2482,5843,5844,5845,2487,5846,5847,5848,5849,5850,202,5851,5852,2495,5853,5854,2499,5855,5856,5857,2504,5858,5859,2507,5860,5861,5862,2511,5863,5864,202,5865,5866,2515,5867,5868,2518,5869,5870,5871,2523,5872,5873,202,5874,5875,2527,5876,5877,5878,5879,2534,5880,5881,2537,5882,5883,5884,5885,2543,5886,5887,5888,5889,5890,5891,202,5892,5893,2552,5894,5895,5896,2556,5897,5898,5899,202,5900,5901,2561,5902,5903,5904,2566,5905,5906,5907,2570,5908,5909,202,5910,2573,2574,5911,5912,5913,2578,5914,5915,5916,2582,5917,5918,202,5919,5920,2587,5921,5922,5923,5924,202,5925,5926,2593,5927,5928,5929,5930,2599,5931,5932,202,5933,5934,2603,5935,5936,5937,5938,5939,5940,2611,5941,5942,5943,5944,5945,5946,2619,5947,5948,5949,5950,2624,5951,5952,5953,5954,5955,2631,5956,5957,5958,5959,202,5960,5961,2638,5962,5963,5964,2642,5965,5966,5967,202,5968,5969,2647,5970,5971,5972,5973,2652,5974,5975,5976,2656,5977,5978,5979,2660,5980,5981,5982,2665,5983,5984,5985,5986,202,5987,5988,2671,5989,5990,5991,5992,5993,202,5994,5995,202,5996,5997,202,5998,2683,5999,6000,202,6001,2687,6002,6003,202,6004,2691,6005,6006,6007,202,6008,2696,6009,6010,6011,202,6012,2702,6013,6014,202,6015,2707,6016,6017,6018,6019,202,6020,2713,6021,6022,6023,6024,202,6025,2719,6026,6027,6028,6029,202,6030,6031,6032,6033,6034,6035,6036,6037,6038,6039,6040,6041,2735,202,2736,2737,6042,6043,202,6044,2741,6045,6046,6047,6048,6049,6050,202,6051,2751,6052,6053,6054,6055,202,6056,2758,6057,6058,6059,6060,202,6061,2764,6062,6063,6064,202,6065,6066,2770,6067,6068,6069,6070,202,6071,2776,6072,6073,6074,202,6075,6076,202,6077,2783,6078,6079,202,6080,6081,202,6082,2789,6083,6084,202,2792,6085,202,2796,6086,202,2798,6087,202,2802,6088,202,2806,6089,202,2808,2809,6090,6091,202,6092,2814,6093,6094,202,2817,2818,6095,4920,202,6096,2822,6097,6098,202,6099,6100,202,6101,2830,6102,202,6103,6104,202,6105,2836,6106,202,6107,6108,202,6109,2843,6110,202,6111,2847,6112,202,6113,6114,202,2854,2855,6115,202,4301,2858,6116,6117,202,6118,2863,6119,202,6120,2867,6121,6122,202,6123,2871,6124,6125,202,6126,2875,6127,6128,6129,202,2879,2880,6130,6131,6132,202,6133,2886,6134,6135,6136,202,6137,2892,6138,6139,202,6140,2896,6141,6142,6143,202,2900,6144,1036,2903,202,6145],[6898],{"_787":788,"_789":6149,"_410":6899,"_792":62},[6151,6152,202,6153,6154,6155,6156,6157,202,6158,6159,1005,6160,6161,6162,6163,6164,6165,6166,6167,6168,6169,6170,6171,6172,6173,6174,6175,6176,6177,6178,6179,6180,6181,6182,6183,6184,6185,6186,6187,6188,6189,202,6190,6191,6192,6193,6194,202,6195,6196,202,6197,6198,6199,6200,6201,6202,6203,6204,6205,6206,936,6207,6208,937,6209,6210,6211,849,6212,6213,202,6214,6215,6216,6217,6218,6219,6220,202,6221,6222,6223,6224,6225,6226,6227,6228,6229,6230,6231,6232,6233,6234,6235,6236,6237,6238,202,6239,6240,6241,6242,6243,6244,6242,6245,6244,6242,6246,6244,6247,202,6248,6241,6242,6249,6244,6242,6250,6244,6242,6251,6244,6242,6252,6244,6242,6253,6244,6247,202,6254,6255,6256,202,6257,6254,6258,6256,6259,202,6260,6241,6242,6261,6244,6242,6262,6244,6242,6263,6244,6242,6264,6244,6247,202,6254,6265,6256,202,6266,6241,6242,6267,6244,6242,6268,6244,6242,6269,6244,6242,6270,6271,6272,6244,6242,6273,6244,6242,6274,6275,6244,6242,6276,6244,6242,6277,6244,6247,202,6278,6241,6242,6279,6244,6242,6280,6244,6242,6281,6244,6242,6282,6244,6283,6242,6284,6244,6242,6285,6244,6242,6286,6244,6242,6287,6244,6288,6247,202,6289,6241,6242,6290,6244,6242,6291,6244,6292,6247,202,6293,6241,6242,6294,6244,6242,6295,6244,6296,6247,202,6297,6241,6298,6242,6299,6244,6247,202,6300,6241,6242,6301,6244,6242,6302,6244,6303,6247,202,6304,6241,6242,6305,6244,6242,6306,6244,6242,6307,6244,6242,6308,6244,6309,6247,202,6310,6241,6242,6311,6244,6242,6312,6244,6313,6247,202,6314,6241,6242,6315,6244,6242,6316,6244,6242,6317,6244,6242,6318,6244,6247,202,6319,6241,6242,6320,6244,6242,6321,6244,6247,202,6322,6241,6323,6242,6324,6244,6325,6247,202,6326,6241,6327,6242,6328,6244,6242,6329,6244,6247,202,6330,6241,6331,6247,202,6332,6241,6242,6333,6244,6334,6247,202,6335,6241,6242,6336,6244,6242,6337,6244,6242,6338,6244,6242,6339,6244,6242,6340,6244,6247,202,6341,6342,6343,202,6344,6241,6345,6242,6346,6244,6242,6347,6244,6242,6348,6244,6242,6349,6244,6247,202,6350,6351,6352,6256,6353,6354,6355,6356,6357,6358,6359,6360,6361,6358,6362,6363,6361,6358,6364,6365,6366,6367,6361,6358,6368,6365,6369,6367,6361,6358,6370,6365,6371,6367,6361,6358,6372,6373,6361,6358,6374,6365,6375,6367,6361,6358,6376,6365,6377,6367,6361,6358,6378,6365,6379,6367,6361,6358,6380,6365,6381,6367,6361,6382,6383,202,6384,6353,6357,6385,6386,6387,6388,6389,6390,6391,6392,6393,6394,6395,6396,6397,6398,6399,6400,6401,6402,6403,6404,6405,6406,6407,6408,6409,6410,6411,6412,6413,6414,6415,6416,6417,6418,6419,6420,6421,6422,6423,6424,6425,6426,6427,6428,6429,6430,6431,6432,6433,6434,6435,6436,6437,6438,6439,6440,6441,6442,6443,6444,6445,6446,6447,6448,6449,6450,6451,6452,6453,6454,6455,6456,6358,6457,6458,6361,6459,6460,6382,6383,202,6461,6462,6463,6464,6220,6465,6466,6467],[6901,6902,6903,6904,6905,6906,6907,6908,6909],{"_761":49,"_49":6492},{"_761":6479,"_164":6146,"_787":6490,"_789":6491},{"_761":49,"_49":6489},{"_761":6479,"_164":4338,"_787":6487,"_789":6488},{"_761":6479,"_164":2904,"_787":6485,"_789":6486},{"_761":6479,"_164":999,"_787":6483,"_789":6484},{"_761":49,"_49":6482},{"_761":6479,"_164":781,"_787":6480,"_789":6481},{"_761":49,"_49":6478},[6912,6913,6914,6915,6916,6917,6918,6919,6920,6921,6922,6923,6924,6925,6926,6927,6928,6929,6930,6931,6932,6933,6934,6935,6936,6937,6938,6939,6940,6941,6942,6943,6944,6945,6946,6947,6948],{"_6502":6503,"_266":199,"_6504":308,"_277":-5,"_6505":260,"_6506":-5,"_6507":-5,"_6508":6509,"_6510":6511,"_6512":-5,"_6513":-5,"_6514":6515,"_6516":18,"_6517":62,"_6518":57,"_6519":18,"_6520":-5},{"_95":418,"_99":329,"_410":6949},{"_315":316,"_317":318,"_6603":6604,"_6605":132,"_325":-5,"_95":6606},{"_95":6558,"_317":6602,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6601,"_164":6593,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6600,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6599,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6598,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6597,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6596,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6595,"_164":6581,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6594,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6592,"_164":6593,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6591,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6590,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6589,"_164":6581,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6588,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6587,"_164":6568,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6586,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6585,"_164":6568,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6584,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6583,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6582,"_164":6581,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6580,"_164":6581,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6579,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6578,"_164":6575,"_6560":6561,"_6562":6576},{"_95":6558,"_317":6577,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6574,"_164":6575,"_6560":6561,"_6562":6576},{"_95":6558,"_317":6573,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6572,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6571,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6570,"_164":6568,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6569,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6567,"_164":6568,"_6560":6561,"_6562":-5},{"_95":6558,"_317":6566,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6565,"_164":-5,"_6560":-5,"_6562":-5},{"_95":6558,"_317":6564,"_164":6146,"_6560":6561,"_6562":6563},{"_95":6558,"_317":6559,"_164":6146,"_6560":6561,"_6562":6563},[6950],{"_761":49,"_49":6609},"task_e_6a6e2eef25a4832882dd6aea474ee42b",1785605871.14736,"GitHub Mention: feat(api,web): require step-up authentication for privileged user administration (#308)","has_generated_title","has_unread_turn","denormalized_metadata",{"_6981":35,"_6982":6983,"_6984":-5,"_6985":-5,"_6976":6986,"_6987":-5,"_6988":-5,"_6989":-5,"_6990":-5},"task_status_display",{"_6970":6971,"_6972":199,"_133":130,"_6973":-5,"_6974":6975},"creator_workspace","external_pull_requests",[6963],{"_45":6964,"_6965":86,"_6966":6967,"_6968":132},"github-1301193065-336","assistant_turn_id","pull_request",{"_307":308,"_298":309,"_310":311,"_312":62,"_313":18,"_314":18,"_315":316,"_317":318,"_319":270,"_320":130,"_321":322,"_323":324,"_325":326,"_327":-5,"_328":-5,"_329":6969,"_331":332,"_333":334,"_335":336,"_337":338},"codex_updated_sha",{"_292":293,"_184":293,"_339":-5,"_296":297,"_45":294},"latest_turn_status_display",{"_419":86,"_115":116,"_6976":-5,"_97":6977,"_6978":-5,"_6979":-5,"_6980":6975,"_117":-5},"environment_label","fix_task_id","initial_intent","pr","diff_stats",[],"image_asset_pointer_citations","issue_counts","intent","num_follow_ups","repo_name_map",{},"last_user_turn_created_at","last_turn_status",{"_6991":-5,"_6992":-5,"_6993":-5},"last_pushed_turn_id","start_branch_name","pushed_branch_name","cached_pull_request_data","files_modified","lines_added","lines_removed","dd",{"_7008":7009,"_7010":7011},"disablePrefetch","shouldPrefetchAccount","shouldPrefetchUser","shouldPrefetchSystemHints","manageRootRouteStylesheet","mobileWebHandoffEnabled","promoteCss","disableSSR","stripModulepreloadImports","paidCampaignAppRedirect","statsigGateEvaluationsPromise",["P",7007],"traceId","13668754873129386352","traceTime",1787276380001]