ℹ️ About Codex in GitHub

\\n
\\n\\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\\n- Open a pull request for review\\n- Mark a draft as ready\\n- Comment \\\"@codex review\\\".\\n\\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\\n\\n\\n\\n\\nCodex can also answer questions or update the PR. Try commenting \\\"@codex address that feedback\\\".\\n \\n

\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"Fixed in 983af91: `actionFilter` is now validated against `availableActions` for the current `entityTypeFilter` and ignored (not just reset on a dropdown click) when the URL's action isn't in scope for its type — closes it for both a manual click and a direct/shared URL load. Mutation-verified: reverting the validation makes the new test fail on its own `action: undefined` assertion.\",\"path\":\"web/src/routes/AuditPage.tsx\",\"side\":\"RIGHT\",\"line\":108}{\"type\":\"pull_request_comment\",\"body\":\"Added in 983af91: a new Help bullet (auditRecordTypeFilter, en/es/tl) explaining the two-step narrow-then-filter behavior, plus a GLOSSARY.md entry (#520). Full web suite green (1778/1778), typecheck clean.\",\"path\":\"web/src/routes/AuditPage.tsx\",\"side\":\"RIGHT\",\"line\":217}","text_elements",[],{"_419":805,"_398":399,"_421":405},{"_422":806,"_424":-5,"_45":-5,"_426":807,"_428":-5,"_99":328,"_95":430},[808],{"_431":405},{"_49":801,"_95":454},{"_419":810,"_398":399,"_421":405},{"_422":811,"_424":-5,"_45":-5,"_426":812,"_428":-5,"_99":328,"_95":430},[813,814],{"_431":405},{"_49":816,"_95":454},{"_49":815,"_95":454},"\n /workspace/cluckwork\n bash\n 2026-08-13\n Etc/UTC\n /workspace/cluckwork\n","# AGENTS.md instructions for /workspace/cluckwork\n\n\n# AGENTS.md — Cluckwork\n\nPoultry egg-farm management system. Backend: **.NET 10** (C#), layered DDD. Frontend: **React 19 + Vite** SPA in `web/`. Postgres via EF Core.\n\nThis file is the shared brief for any coding agent (Claude Code, Codex, etc.).\n\n## Communicating\n\nKeep explanations clear and human-sounding. Provide concise, focused responses. Skip preambles and recaps — lead with the action or answer.\n\n## Layout\n\n```\nsrc/\n Cluckwork.Domain aggregates, value objects, domain events (no deps)\n Cluckwork.Application feature handlers, repository interfaces, validators\n Cluckwork.Infrastructure EF Core, Identity/JWT, repositories, seeding, jobs\n Cluckwork.Api minimal-API endpoints, middleware, Program.cs\nweb/ React/Vite SPA (see web/README.md)\ndeploy/ docker-compose (.yml prod, .dev.yml dev DB), .env.example\nspecs/ product + technical specs, wireframes\ntests/ Domain.Tests, Application.Tests, Api.IntegrationTests\n```\n\nDependencies point inward: Api → Application/Infrastructure → Domain. Domain depends on nothing.\n\n## Build / test / run\n\n```bash\ndotnet build Cluckwork.sln # warnings are errors — keep it clean\ndotnet test Cluckwork.sln # 688 tests as of 2026-07; integration needs Docker\n```\n\n- **Integration tests** spin up a real Postgres via Testcontainers (`docker` required). No SQLite — EF SQL semantics differ.\n- **Run full stack (prod-like):** `docker compose -f deploy/docker-compose.yml up --build` → SPA + API on http://localhost:8080 (single container; API serves the built SPA from `wwwroot`).\n- **Run frontend dev:** `cd web && npm run dev` → http://localhost:5173 (proxies `/api` → :8080).\n- **Debug API (no docker stack):** `docker compose -f deploy/docker-compose.dev.yml up -d` (Postgres on :5432), then run/debug `Cluckwork.Api` (Development env). Dev secrets live in **user-secrets**, not files.\n\n## Conventions (follow these)\n\n- **Result pattern:** domain/handlers return `Result` / `Result` (see `Domain/Common`). Don't throw for expected failures; throw only for invariant violations (e.g. `Flock.Create` guards).\n- **Every aggregate mutation must bump `Version`.** `Version` is an EF concurrency token (`IsConcurrencyToken`) — EF puts the *original* value in the UPDATE's WHERE but never auto-increments it. A mutation without `Version++` silently loses concurrent races (both writers match `WHERE Version = N`) instead of 409ing. This bug shipped three times (`RecordProduction` was correct; `Submit`/`Lock` and `SalesOrder.AddItem` weren't) — each now has a parallel-race integration test; add one for any new mutation.\n- **Handler per feature**, invoked directly from endpoints — **no MediatR**. Register handlers/validators/repos in `Program.cs`.\n- **Validation:** FluentValidation validators (`*Validator`), one per command; endpoints call `ValidateAsync` and return `ValidationProblem`.\n- **Endpoints:** minimal APIs grouped under `/api/v1/...` via `MapEndpoints`; writes require auth + an `Idempotency-Key` (middleware).\n- **Multi-tenancy:** every tenant-owned entity has `AccountId`; enforced by an EF **global query filter** + a **`TenantStampInterceptor`** (stamps on insert). `TenantContext` is resolved per-request from the JWT `account_id` claim. At startup it's unresolved → use `IgnoreQueryFilters()` in seeders.\n- **Auth:** asymmetric JWT + rotating refresh tokens. PEM keys come from config with escaped `\\n`; normalize via `PemKey.Normalize` before `ImportFromPem`. Integration tests generate an ephemeral RSA pair at test-process startup (`TestJwtKeys` in `CluckworkWebApplicationFactory.cs`) — no real key material is ever committed to source (`deploy/.env.example` carries PEM armor with a `replace-me` body, not a usable key).\n- **Both JWT keys are checked at boot, and the check is serving-only (#510/#347).** `AddCluckworkIdentity` requires `Jwt:PublicKeyPem` **and** `Jwt:PrivateKeyPem` to be non-blank **and to actually import**; a `Serving` process refuses to start otherwise. Two traps this closes, both of which shipped: `configuration[...] ?? throw` catches **only null** while the shipped `appsettings.json` carries `\"\"` — use **`IsNullOrWhiteSpace`**, never `??`, or the guard is decorative for every real deployment; and importing inside the `AddJwtBearer` delegate makes a corrupt key a **per-request** failure, so the farm boots green, `/health/ready` passes, the container `HEALTHCHECK` passes, and every authenticated request 500s — an orchestrator sees a healthy instance that rejects every login. The check takes a `ProcessRole` and is skipped for one-shot verbs, which neither issue nor validate a token; **making it eager without that scope is a fresh #331** in the most security-sensitive file of the set. Pinned from both sides: four rows in `ProcessRoleGuardTests` (each key × missing/unusable) plus `OneShotVerbMinimalConfigTests`, whose environment carries no `Jwt:*` at all.\n- **Credential epoch revocation (#364).** Every access/refresh token is bound to the user's `CredentialEpoch`; every password-reset path bumps it so issued credentials fail on next use. Epoch **`0` is permanently retired** (users start at `1`, legacy refresh rows at `0`), and a missing/malformed `credential_epoch` claim is **always a mismatch** — never default it to the DB epoch. `CredentialEpochMiddleware` does a **fresh DB read per authenticated request** (the round trip *is* the fail-closed guarantee — do not cache), sits **after `TenantResolutionMiddleware`, before `MustChangePasswordMiddleware`**, and exempts `auth/logout`. Login/step-up snapshot the verified epoch+stamp before clearing failed-access and refuse issuance on a concurrency-loss reload. Distinct from #283/#265/#308 — none substitutes for another. **Break it and a revoked credential keeps working.** → [`docs/decisions/364-credential-epoch-revocation.md`](docs/decisions/364-credential-epoch-revocation.md)\n- **Base reference data via guarded raw-SQL migrations (#283).** The default account, four assignable roles, default egg grades, and packed-unit conversions are **static reference data baked into the migrations** as hand-written `migrationBuilder.Sql` with `WHERE NOT EXISTS` guards — **never `HasData`/`InsertData`** (which key on the PK and would either collide or emit `UpdateData`/`DeleteData` that silently reverts the farm's own edits). No runtime seeder, no `Seed:*`. The **grades** guard is whole-set (empty catalog, because grades are user-renamable); roles/conversions/account are **per-key** (keys aren't user-mutable). Pinned by `MigrationSecurityReviewTests` + `BaseReferenceDataMigrationTests`. **Regenerate these into `HasData` and a later model-diff reverts a renamed grade.** → [`docs/decisions/283-migrations-base-provisioning.md`](docs/decisions/283-migrations-base-provisioning.md)\n- **Migrations: `InitialCreate` frozen, one migration per change (#407).** `Persistence/Migrations/` is one squashed `InitialCreate` (recorded id `20260801190854_InitialCreate`); it is **frozen and never regenerated**, and **every schema change gets its own `dotnet ef migrations add`**. EF never re-runs an applied migration, so a column **hand-folded into `InitialCreate` silently does not exist** on any booted DB — it surfaces as broken behaviour (a failed login, #399), not a migration error. `InitialCreate` also carries four un-regenerable `lower(\"Name\")` expression indexes + the base-reference SQL; regenerating mints a new timestamp that desynchronises `__EFMigrationsHistory` everywhere. Pre-squash or pre-#407 dev DBs can't migrate forward — drop and recreate. `MigrationSecurityReviewTests` freezes the id + a portable operation digest. → [`docs/decisions/407-migration-freeze.md`](docs/decisions/407-migration-freeze.md)\n- **Schema docs are generated, committed, and regenerated with every migration (#417).** `docs/schema/` (mermaid ERD + full catalog: every column, constraint, and index — including the raw-SQL expression indexes and partial predicates EF reflection can't see) is produced by `tools/schema-docs/generate.sh` from an ephemeral migrated Postgres via digest-pinned tbls. **Every PR that adds a migration runs the generator and commits the result in the same PR** — CI's `build-and-test` runs `generate.sh --check` (byte-diff against a fresh generation) and fails a stale PR. Generated files under `docs/schema/` are **never hand-edited**, and a conflict there after a rebase is resolved by regenerating, never by hand-merging. Pinned from three sides by `SchemaDocsTests` (postgres-pin uniformity across every tracked file, no environment leakage, completeness against the live catalog). → [`docs/decisions/417-schema-docs.md`](docs/decisions/417-schema-docs.md)\n- **Seed / simulation data is never boot-seeded (#280, #284, #279).** Run it explicitly against an **already-base-seeded, non-Production** database: `ASPNETCORE_ENVIRONMENT=Development dotnet Cluckwork.Api.dll seed --profile demo|simulation` (an unset env → Production → blocked). The verb migrates, seeds, then exits — **authoritative** (ignores config) and **fail-loud** (a real exit code, never a silent no-op). `simulation` additionally records a durable date anchor + completion marker, so a clean re-run — even across a UTC-midnight rollover — converges to `AlreadySeeded`; a polluted account fails the exact-count validation **closed**. → [`docs/decisions/280-seed-and-simulation.md`](docs/decisions/280-seed-and-simulation.md)\n- **Break-glass recovery (#265):** `recover-admin` is a second one-off CLI verb on the same binary, same run-then-exit shape as `seed` — but deliberately **NOT** environment-gated (it must work against a real Production database): `dotnet Cluckwork.Api.dll recover-admin --email [--account ] [--reason ]`. For a locked-out account (the sole-Owner-lost-password case, no email/SMTP reset path) it, in one transaction, resets to a **freshly generated** temporary password (never one passed on the command line), rotates the security stamp, revokes every refresh token, and writes a conspicuous `User.BreakGlassReset` audit row carrying `--reason`. The temp password is printed to **stdout only** (never the logger/OTLP) and exit `0`; failures go to stderr with exit `1` and change nothing. `AdminRecoveryService` orchestrates; `IdentityProvider.BreakGlassResetAsync` shares the reset/revoke core with `SetUserPasswordAsync`. Full procedure + verification drill: `docs/runbooks/break-glass-account-recovery.md`.\n- **First-run admin provisioning: `bootstrap-admin` (#283).** `dotnet Cluckwork.Api.dll bootstrap-admin --email ` (run-then-exit, always available in Production) migrates, then — **only if the default account has no Owner** — creates one with a **freshly generated password (stdout only, never the logger/OTLP)** and `MustChangePassword=true`; a re-run is a **silent no-op**. While the flag is set the JWT carries `must_change_password`, `MustChangePasswordMiddleware` 403s every endpoint except `auth/change-password`+`auth/logout` (before `UseAuthorization` and before idempotency), and the SPA renders **Set your password**. Any successful reset clears the flag (one invariant in `IdentityProvider`). **Deliberately a separate credential type from #265/#308** — never conflated. → [`docs/decisions/283-first-run-admin-provisioning.md`](docs/decisions/283-first-run-admin-provisioning.md)\n- **Farm timezone + tzdata/ICU image constraint (#264):** the default account (a fixed `\"UTC\"` migration literal since #283) is provisioned once; a real farm sets its actual IANA zone via **Settings → timezone** after first login (`Account.UpdateSettings`), not at provisioning time (the `Seed:TimeZoneId` config lever from before #283 is retired along with the runtime seeder it fed). The farm clock resolves IANA zones via `TimeZoneInfo.FindSystemTimeZoneById` for every safety-sensitive local-day decision and **fails closed**, so the runtime **image MUST carry tzdata + ICU** (the Ubuntu 24.04 (Noble) `aspnet:10.0` base does; **never** an Alpine/chiseled base without tzdata, and **never** `InvariantGlobalization=true`). `AddCluckworkPersistence` still asserts a representative IANA canary resolves at boot (`TimeZoneAvailability.EnsureResolvable`), for **both** process roles — a bad image fails the boot loudly instead of surfacing later as a per-request `FarmTimeZoneException`.\n- **Migrate command + prod migration split (#263).** `dotnet Cluckwork.Api.dll migrate` applies EF migrations then exits — the **pre-deploy-job entrypoint**. In Production `Database:MigrateOnStartup=false`, so the serving process never runs DDL; the **guarantee is ordering** — compose runs a one-shot `migrate` service before `app` waits on `service_completed_successfully`. `DatabaseReadyHealthCheck` is the backstop: `/health/ready` **503s while any migration is pending**. The remaining host step (deploy repo) is a least-privilege runtime role with no DDL, plus `ALTER DEFAULT PRIVILEGES` for the migrator. → [`docs/decisions/263-migrate-command.md`](docs/decisions/263-migrate-command.md)\n- **Proxy-trust boot guard (#260):** behind a reverse proxy/edge, HSTS (#144) and the per-IP login limiter (#143) only work if the app trusts the proxy's `X-Forwarded-*`, which it does **only** for networks in `RateLimiting:TrustedProxies`. An **empty list in Production fails the boot** (a `ProcessRole.Serving`-only guard, so `migrate`/`seed`/`recover-admin` are unaffected — see the process-role bullet below) rather than silently running with inert HSTS + a one-bucket limiter. Opt out with `RateLimiting:AllowNoTrustedProxies=true` only for a rare direct-TLS deploy with no fronting proxy. The concrete edge CIDR is deploy config (in the separate deployment/ops repo).\n- **Process role, not statement order (#347).** A boot guard's scope is declared, never positional. `ProcessRoles.From(args)` (`Hosting/ProcessRole.cs`) computes `ProcessRole.Serving | OneShot` **once**, before the host is built, and every role-scoped guard takes it: `ServingBootGuards.EnsureServingConfiguration` (#260, #319) is called **before** the CLI dispatch on purpose and still leaves the verbs alone, and `AddCluckworkTelemetry` (#316) and `AddCluckworkRateLimiting` (all of `RateLimitingOptions.Validate`) degrade with a stderr warning for `OneShot`. The one-shot verb list is derived from `CliDispatcher.Commands` so a new verb classifies itself; **`healthcheck` is the one that must be named explicitly** (it isn't an `ICliCommand` — it needs no host) and omitting it silently classifies the container's own probe as `Serving`. **Never gate a guard on where its statement sits**: that is what #331 was — the #316 validation ran at service registration, ahead of the dispatcher, and killed `recover-admin` (the break-glass verb) with SIGABRT 134. **Scope the whole subsystem, not the one setting that bit you**: #316's *endpoint* check was role-scoped while `ParseProtocol` two lines above it was not, so `Otlp:Protocol=bogus` still killed `recover-admin`; and `RateLimiting:TrustedProxies` **empty** was correctly serving-only while the **same key malformed** aborted every verb. **Every serving-only guard needs a row in `ProcessRoleGuardTests.ServingOnlyGuards`, one per VIOLATION rather than per subsystem** — `ServingGuardCoverageTests` reflects over `ServingBootGuards`, `RateLimitingOptions` and every `.ValidateOnStart()` registration and fails when a row is missing. Note that `.ValidateOnStart()` is serving-only *by mechanism* (it runs from `Host.StartAsync`, which the CLI dispatcher never reaches), so converting one to an eager registration-time check aborts every verb. The #261/#262 TLS floor and the #264 tzdata canary take no role: they apply to **both**, and unconditional code says so better than a parameter nobody branches on. → [`docs/decisions/347-process-role.md`](docs/decisions/347-process-role.md)\n- **Production Postgres TLS floor (#261/#262).** `ConnectionStrings:Default` accepts libpq URI or key-value form. In Production the effective `sslmode` is a **fail-closed allow-list**: `VerifyCA`/`VerifyFull` silent, `Require` warns, **everything else — `Disable`/`Allow`/`Prefer`, unset, or undefined — fails the boot**. `Database:AllowInsecureConnection=true` is the explicit opt-out for the co-located plaintext compose stack. When mapping a libpq param, **`ContainsKey(\"\")==false` does NOT mean Npgsql lacks the setting** — usually the keyword is spelled differently (`keepalives`→`Tcp Keepalive`, `client_encoding`→`Client Encoding`); search the keyword list before concluding it's unmappable (that exact false negative shipped #332). Integration tests opt out of this **and** the #260 guard. → [`docs/decisions/261-postgres-tls-floor.md`](docs/decisions/261-postgres-tls-floor.md)\n- **GSS/Kerberos negotiation off by default (#332).** `PostgresConnectionString` appends `GSS Encryption Mode=Disable` **unless the operator set it** (detected by **presence, not value**), **textually** after the TLS floor runs (a round-trip through the Npgsql builder would reorder/requote the operator's string and throw on any keyword this version doesn't know). Without it, Npgsql's `Prefer` default makes every connector dlopen the absent `libgssapi_krb5.so.2` and print two pre-Serilog stderr lines per process. Orthogonal to `sslmode` and to GSS *authentication*. → [`docs/decisions/332-gss-kerberos.md`](docs/decisions/332-gss-kerberos.md)\n- **Design-time migration connection fail-closed (#318):** `AppDbContextDesignTimeFactory` (used by `dotnet ef migrations add`/`database update`, never by the `migrate` verb, which uses the built host's own config) has **no default connection** — an unset/blank `CLUCKWORK_MIGRATIONS_CONNECTION` throws immediately, naming the variable, rather than falling back to a predictable `Host=localhost;...;Username=postgres;Password=postgres`. Every target is held to the **same allow-list TLS floor as a Production boot** (#261/#262, reused via `PostgresConnectionString.NormalizeAndValidate` — no second validator), except an explicitly acknowledged **loopback** development target: `CLUCKWORK_MIGRATIONS_ALLOW_INSECURE_LOOPBACK=true` permits plaintext, but only when the connection's host is `localhost`/`127.0.0.1`/`::1` (checked via `IPAddress.IsLoopback`) — set against any other host, it fails rather than silently widening scope.\n- **Container image hardening (#267):** the runtime stage runs **non-root** (`USER $APP_UID`, uid 1654 — the base image's built-in `app` account); all three base images are **digest-pinned** (`@sha256:…`, kept current by Dependabot's `docker` ecosystem); a CI job builds the image and **Trivy** fails the build on a *fixable* HIGH/CRITICAL. `aquasecurity/trivy-action` is **SHA-pinned** — the action was compromised in the 2026-03 supply-chain incident, so pin the immutable commit, not the re-pointable tag (this is the standing rule for third-party actions). Keep the full glibc base (tzdata + ICU per #264); never chiseled/Alpine.\n- **Container health probe: the `healthcheck` verb (#266).** The runtime image and the compose `app` service run `dotnet Cluckwork.Api.dll healthcheck` — a run-then-exit verb **dispatched before host build** (it needs no host/DI/DB/config, so a 30s probe doesn't re-run startup or re-log boot warnings). The hardened image ships no curl/wget, so the probe is **in-process**: it GETs `/health/ready` over loopback and exits `0` on a 2xx, `1` on any other status or an unreachable server — **never a false green**. CI boots the built image and asserts `/health/ready` goes green. → [`docs/decisions/266-container-health-probe.md`](docs/decisions/266-container-health-probe.md)\n- **Transient-DB retry, and where it stops (#269).** `EnableRetryOnFailure` retries only **self-contained EF units** (every read, every `SaveChanges` outside a user transaction); it must **not** wrap unreplayable work. The general hazard is **an automatic replay sitting above a stateful detector** (a monotonic counter, a CAS stamp, a single-use claim) that can't tell \"this request racing itself\" from the signal it exists to detect. Two cures, and picking wrong ships the bug: **`SingleAttemptExecution`** when the replay is itself observable (e.g. `AccessFailedAsync`'s second durable increment — otherwise one wrong password locks at ~half the #128 threshold); a **durability probe keyed on a self-minted token** when the replay writes nothing and the defect is a mis-read `catch` (refresh-token rotation, login/reset `INSERT`s). All fail closed; pinned from both sides in `RetryBoundaryTests`. → [`docs/decisions/269-transient-db-retry-boundary.md`](docs/decisions/269-transient-db-retry-boundary.md)\n- **A new Production boot guard must be taught to the sim harness (#370).** Every guard that fails the boot on missing/invalid config (#260, #261/#262, #316, #319, …) and every config-key add/rename/retire must **also update `tools/simulation/bootstrap.sh` + `docker-compose.sim.yml` + `verify-harness.sh` in the same PR** — that harness runs **Production config on purpose**, is **deliberately not in CI**, and every path into it is human-started, so nothing tells you when you break it (four guards once landed unnoticed until it couldn't boot `main`). Satisfy guards **properly** (a concrete `AllowedHosts`, the documented opt-outs), never by disabling one. **Treat a boot-guard PR that leaves the harness behind like a missing test.** → [`docs/decisions/370-sim-harness-boot-guards.md`](docs/decisions/370-sim-harness-boot-guards.md)\n- **SPA E2E lives in `tools/simulation/ui/` (#277/#385).** Playwright drives the real built SPA over the **same** `seed --profile simulation` fixture k6 uses; `web/` stays Vitest + Testing Library. Three enforced rules, each of which has caught something: **never hardcode a credential** (personas from the git-ignored `.sim-cast.json`), **never hardcode English** (selectors resolve through the SPA's own en/es/tl catalogs — a missing key throws), and **respect the farm clock** (`America/Chicago` is behind UTC). Mutation-checked (`npm run mutation`; a red baseline aborts). **Anything reasoning about `inert` or the accessibility tree must go through CDP** (`src/ax.ts`) — Playwright's `ariaSnapshot`/`getByRole`/`isVisible` do **not** model `inert`, so such a spec written with them passes whether or not the app inerts anything (#501). **The quick suite runs on PRs** (path-filtered, ~3 min; owner call 2026-08-08 after #433 broke it silently); the `slow`/`canary` modes and the k6 sibling stay `workflow_dispatch`-only, so the #370 warning still applies to those. → [`docs/decisions/277-spa-e2e.md`](docs/decisions/277-spa-e2e.md)\n- **A write-contract change must update its non-CI callers (#394).** Adding a required field, tightening a validator, or changing an aggregate's state machine breaks automated callers no test references. **Coverage is not uniform:** the seeders are covered only to the handler/domain layer, so a **validator-only** tightening is invisible to all five seeder tests (they call `HandleAsync` directly, skipping `ValidateAsync`); `tools/simulation/k6/` and the Playwright specs are **uncovered**, and a green baseline hides it (`authedPost` counts a tolerated `[403,409,422]` as a pass, and `reset.sh` never runs k6). **So verify the request/status contract by reading the callers, not by running.** Grep callers of the endpoint, re-check each payload, and narrow a tolerated-status list when a status flips from \"constrained write\" to \"broken write\". → [`docs/decisions/394-write-contract-callers.md`](docs/decisions/394-write-contract-callers.md)\n- **Production logs: compact JSON on stdout; base layer argument-free (#404).** stdout is the only sink (no file/vendor sink). Production selects `CompactJsonFormatter`; Development the human `outputTemplate`; the base `appsettings.json` Console entry carries **`Name` only, no `Args`** — a template left in the base file merges *beside* the formatter and Serilog **silently binds the template and ignores the formatter**. Trace fields differ by format: compact JSON writes **`@tr`/`@sp`**, the Dev template `{TraceId}`/`{SpanId}` — a collector query against the wrong name matches nothing. **Compact JSON serializes EVERY property**, so anything pushed via `BeginScope`/`LogContext`/`ForContext` now reaches the collector (see #273 for the redaction answer). Pinned by `ProductionLogFormatTests`. → [`docs/decisions/404-production-logs.md`](docs/decisions/404-production-logs.md)\n- **Nullable enabled**, no unused usings (both are build-breaking).\n\n## Secrets — never commit\n\n- `deploy/.env` is gitignored (real values). `deploy/.env.example` holds placeholders only.\n- Local API debug config uses `dotnet user-secrets` (keyed by `UserSecretsId` in `Cluckwork.Api.csproj`).\n- No hardcoded passwords/keys in source — GitGuardian scans PRs. Generate test credentials at runtime.\n\n## Host-agnostic repo (deployment boundary)\n\nThis repo is **host-portable** — it must build and run against any host without\ncarrying provider-specific config. The app reads every environment specific from\nconfig/env (connection string, `RateLimiting:TrustedProxies`, `Seed:TimeZoneId`,\nPostgres `sslmode`, …) and **never names or branches on a hosting provider**.\n\n- **Stays here** (portable operational contract): the Dockerfile (incl. its\n `HEALTHCHECK`), `deploy/` compose as a local/reference stack, health probes\n (`/health/live`, `/health/ready`), the `migrate` / `seed` / `recover-admin` /\n `healthcheck` verbs, `.env.example`, and docs that state *requirements* (\"needs tzdata + ICU\",\n \"needs a trusted-proxy list\", \"needs TLS to Postgres\", \"a fronting CDN must\n respect origin cache headers\").\n- **Does NOT belong here** (goes to a **separate deployment/ops repo**):\n provider deploy manifests (`railway.json`, `fly.toml`), IaC (Terraform/Pulumi),\n CDN / DNS / edge config, secret-store wiring, provider-named runbooks, and the\n concrete environment *values* (proxy CIDRs, CA bundles, connection URLs).\n\nReviewers: treat a hardcoded provider name in code, config, or a committed doc\nlike a missing test — flag it. Naming a provider as a passing *example* in prose\nis tolerable only when no portable phrasing works; prefer the neutral term.\n\n### Deploy invariant: exactly ONE serving API instance (#271, #338)\n\n**Run one serving instance.** More than one breaks four separate things, and\nnone of them announces itself as \"you are running two replicas\". This is a\n*requirement* the app imposes on its host, so it lives here; the concrete\nreplica count and how it is pinned are deploy-side.\n\n`AddHostedService()`\n(`Hosting/CluckworkJobServiceCollectionExtensions.cs`) means **every** instance\nruns the worker loop, and the poll claims nothing — no `FOR UPDATE SKIP\nLOCKED`, no lease, no advisory lock. What that exposes today is **the three\nrecurring sweeps**, which ride the same poll and run unconditionally per\ninstance: `DailyEntryLockSweep`, `RefreshTokenPurgeSweep`,\n`IdempotencyRecordPurgeSweep`. The durable-job half is still a scaffold that\nselects pending rows and logs them — no handlers are registered — so job\ndouble-execution is latent, not live. **Registering the first handler makes it\nlive**, which is the moment this invariant stops being about sweeps only.\n\nNot every double-run is equally bad, and the difference decides what an operator\nwould actually see. The two purge sweeps are idempotent deletes, so a second\nrunner wastes work and reports nothing — genuinely silent.\n`DailyEntryLockSweep` is not silent: it reads-then-writes behind an optimistic\n`Version` token, so the losing replica's `SaveChangesAsync` throws a concurrency\nexception, which its per-account `catch` logs as `Lock sweep failed for account\n{AccountId}` (`Jobs/DailyEntryLockSweep.cs`). That is observable — but it reads\nas a database fault, not as \"two replicas are sweeping\", which is the sense in\nwhich the duplicate stays invisible.\n\n**Four independent blockers, all of which must close before scaling** — and\nthey are not all in #271:\n\n- **#271 — background work has no single-runner guarantee** (this section's\n subject). Needs an advisory-lock lease or `FOR UPDATE SKIP LOCKED` with crash\n recovery, **plus** a two-instance test proving each job and each sweep runs\n exactly once.\n- **#338 — `IStepUpGrantRegistry` is process-local.** `InMemoryStepUpGrantRegistry`\n is a per-process singleton holding step-up replay tracking and logout epochs,\n and its own header says a multi-instance deployment must move it to a shared\n store. Both #308 guarantees degrade per replica: a single-use grant becomes\n usable **once per replica**, and a logout honoured by one replica is invisible\n to the others. These grants gate privileged account-control operations, so\n this is the blocker with teeth — closing #271 alone does not license scaling.\n- **The IP-keyed auth limiters (#143) are in-process.** `AddRateLimiter`'s\n partitions live in each process — login, refresh, and client-error reports\n alike — so N replicas allow roughly N times the intended attempts per IP\n before lockout.\n- **The per-account report concurrency cap (#311) is in-process.**\n `ReportConcurrencyLimiter` is a singleton owning a `PartitionedRateLimiter`\n (`Api/RateLimiting/ReportConcurrencyLimiter.cs`, registered at\n `Hosting/CluckworkRateLimitingServiceCollectionExtensions.cs`), so one account\n can hold up to N × `ReportsConcurrency.PermitLimit` heavyweight report queries\n in flight — the DB/CPU ceiling that cap exists to bound, multiplied by the\n replica count.\n\nThe last two have no open issue; they are recorded here rather than left to be\nrediscovered.\n\n**How this list was derived, because it was twice derived wrongly.** Both misses\nwere the same shape — a process-local limiter — and the second one lived in a\nfile the first sweep had already opened. So do not extend this list from memory.\nRe-derive it: enumerate **every** `AddSingleton`/`AddHostedService` under `src/`\nplus every in-memory state primitive (`ConcurrentDictionary`, `IMemoryCache`,\n`PartitionedRateLimiter`, `Channel`, `SemaphoreSlim`, mutable statics), then\nclassify each one as safe or not. That walk currently finds 12 `AddSingleton`\nregistrations and 1 `AddHostedService` (13 total, the hosted service is not one\nof the 12); the four above are what survives it. Excluded deliberately, so\nthe next walk need not re-litigate them: `TimeProvider.System`, the Serilog\ndiagnostic contexts, `IValidateOptions`/`IAuthorizationMiddlewareResultHandler`\n(all stateless), and `FirstRunProvisioningLatch` — a monotonic one-way cache of\n\"the default account has an Owner\", where a per-replica copy costs at most a few\nextra reads and cannot go stale in the unsafe direction.\n\n**#307 (multi-replica HTTP write idempotency) is CLOSED**, so the request-path\nhalf is genuinely done — do not read that closure, or #271's, as permission to\nscale. Documenting the invariant, as this section does, is the interim\nmitigation, not the close for any of the four.\n\nThe run-then-exit verbs (`migrate`, `seed`, `recover-admin`, `bootstrap-admin`,\n`healthcheck`) are unaffected: they do not start the host's hosted services.\n\n## Writing a guard (a test that asserts an invariant)\n\nA guard is a test whose job is to *fail* when someone later does the wrong thing — the migration freeze (`MigrationSecurityReviewTests`), the body-reading endpoint check, the simulation manifest's exact counts. **A wrong guard is worse than no guard, because it reads as safety.** #407 spent five review rounds on one. The full rules with the incidents that earned them are in [`docs/decisions/407-writing-a-guard.md`](docs/decisions/407-writing-a-guard.md); in brief:\n\n- **Run a local adversarial pass before the first push** — mutation checks, or a second agent handed the diff and told to *refute* it. Most of #407's rounds were findable locally in seconds.\n- **Mutation first, claim second** — never write \"this catches X\" before running the mutation that makes the guard go red.\n- **Two misses of the same shape mean the METHOD is wrong** — prefer \"walk everything, exclude deliberately\" over \"list what I thought of.\"\n- **For a pinned/golden value, prove portability** — repetition on one machine cannot detect environment leakage; assert the generated content names no absolute paths or assembly files.\n- **Prefer the boring guard** — complexity costs double when the complicated thing is the thing you're trusting.\n\n## Pre-commit hook (opt-in)\n\n\n",{"_419":818,"_398":399,"_421":405},{"_422":819,"_424":-5,"_45":-5,"_426":820,"_428":-5,"_99":821,"_95":430},[822],{"_431":405},"developer",{"_49":823,"_95":454},"Do not spawn sub-agents unless the user or applicable AGENTS.md/skill instructions explicitly ask for sub-agents, delegation, or parallel agent work.",{"_419":825,"_398":399,"_421":405},{"_422":826,"_424":-5,"_45":-5,"_426":827,"_428":-5,"_99":821,"_95":430},[828],{"_431":405},{"_49":829,"_95":454},"You are `/root`, the primary agent in a team of agents collaborating to fulfill the user's goals.\n\nAt the start of your turn, you are the active agent.\nYou can spawn sub-agents to handle subtasks, and those sub-agents can spawn their own sub-agents.\nAll agents in the team, including the agents that you can assign tasks to, are equally intelligent and capable, and have access to the same set of tools.\n\nYou can use `spawn_agent` to create a new agent, `followup_task` to give an existing agent a new task and trigger a turn, and `send_message` to pass a message to a running agent without triggering a turn.\nChild agents can also spawn their own sub-agents.\nYou can decide how much context you want to propagate to your sub-agents with the `fork_turns` parameter.\n\nYou will receive messages in the analysis channel in the form:\n```\nMessage Type: MESSAGE | FINAL_ANSWER\nTask name: \nSender: \nPayload:\n\n```\nThey may be addressed as to=/root\n\nNote that collaboration tools cannot be called from inside `functions.exec`. Call `spawn_agent`, `send_message`, `followup_task`, `wait_agent`, `interrupt_agent`, and `list_agents` only as direct tool calls using the recipient shown in their tool definitions, such as `to=functions.collaboration.spawn_agent`, since they are intentionally absent from the `functions.exec` `tools.*` namespace. Available tools in `functions.exec` are explicitly described with a `tools` namespace in the developer message.\n\nAll agents share the same directory. In detail:\n- All agents have access to the same container and filesystem as you.\n- All agents use the same current working directory.\n- As a result, edits made by one agent are immediately visible to all other agents.\n\nThere are 4 available concurrency slots, meaning that up to 4 agents can be active at once, including you.",{"_419":831,"_398":399,"_421":405},{"_422":832,"_424":-5,"_45":-5,"_426":833,"_428":-5,"_99":821,"_95":430},[834,835],{"_431":405},{"_49":837,"_95":454},{"_49":836,"_95":454},"\n## Skills\nA skill is a set of instructions provided through a `SKILL.md` source. Below is the list of skills that can be used. Each entry includes a name, description, and source locator. `file` locators are on the host filesystem, `environment resource` locators are owned by an execution environment, `orchestrator resource` locators are opaque non-filesystem resources, and `custom resource` locators use their provider's access mechanism.\n### Available skills\n- imagegen: Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output should be a bitmap asset rather than repo-native code or vector. Do not use when the task is better handled by editing existing SVG/vector/code-native assets, extending an established icon or logo system, or building the visual directly in HTML/CSS/canvas. (file: /opt/codex/skills/.system/imagegen/SKILL.md)\n- openai-docs: Use when the user asks how to build with OpenAI products or APIs, asks about Codex itself or choosing Codex surfaces, needs up-to-date official documentation with citations, help choosing the latest model for a use case, or model upgrade and prompt-upgrade guidance; use OpenAI docs MCP tools for non-Codex docs questions, use the Codex manual helper first for broad Codex self-knowledge, and restrict fallback browsing to official OpenAI domains. (file: /opt/codex/skills/.system/openai-docs/SKILL.md)\n- plugin-creator: Create and scaffold plugin directories for Codex with a required `.codex-plugin/plugin.json`, optional plugin folders/files, valid manifest defaults, and personal-marketplace entries by default. Use when Codex needs to create a new personal plugin, add optional plugin structure, generate or update marketplace entries for plugin ordering and availability metadata, or update an existing local plugin during development with the CLI-driven cachebuster and reinstall flow. (file: /opt/codex/skills/.system/plugin-creator/SKILL.md)\n- skill-creator: Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Codex's capabilities with specialized knowledge, workflows, or tool integrations. (file: /opt/codex/skills/.system/skill-creator/SKILL.md)\n- skill-installer: Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos). (file: /opt/codex/skills/.system/skill-installer/SKILL.md)\n","\nFilesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is enabled.\nApproval policy is currently never. Do not provide the `sandbox_permissions` for any reason, commands will be rejected.\n","turn/started",{"_398":399,"_90":840},{"_106":-5,"_45":405,"_406":841,"_408":409,"_410":411,"_412":842},[],"inProgress",{"_412":844,"_398":399},{"_845":846,"_95":847},"activeFlags",[],"active","thread/started",{"_850":851},"thread",{"_852":-5,"_853":-5,"_854":855,"_856":411,"_464":465,"_857":18,"_858":-5,"_859":-5,"_860":-5,"_861":862,"_45":399,"_863":864,"_184":-5,"_865":-5,"_164":866,"_867":202,"_868":411,"_869":399,"_470":870,"_412":871,"_872":-5,"_80":873,"_874":411},"agentNickname","agentRole","cliVersion","0.144.0-alpha.4","createdAt","ephemeral","extra","forkedFromId","gitInfo","historyMode","legacy","modelProvider","openai","parentThreadId","/opt/codex/sessions/2026/08/13/rollout-2026-08-13T02-00-04-019ff8d9-1858-7731-ae36-8674c66736c7.jsonl","preview","recencyAt","sessionId","vscode",{"_95":416},"threadSource",[],"updatedAt",[],"messages",[878],{"_45":879,"_880":881,"_882":883,"_884":883,"_422":885,"_412":886,"_424":-5,"_887":35,"_888":889,"_890":891,"_892":-5},"984ca0b3-0f05-4f80-836b-34c6f8c8a494","author",{"_99":328,"_184":-5,"_888":901},"create_time",1786586404.248074,"update_time",{"_897":49,"_898":899},"finished_successfully","weight","metadata",{"_893":894},"recipient","all","channel","l1239dk1",{"_895":896},"inline_comments",[],"content_type","parts",[900],"@codex both findings addressed in 983af91 — see the two thread replies above for details.\nfeat(web): cascading record-type filter on the Audit page\n\n## Summary\n- Adds a second \"Record type\" dropdown to the Audit page, ahead of the existing \"Action\" dropdown — picking a type narrows Action to only the ~48 codes actually recorded against that entity type, instead of one flat list.\n- `AUDIT_ACTION_ENTITY_TYPE` (web/src/i18n/enums.ts) is the action→entity-type map, read off every `audit.WriteAsync(...)` call site — **not** derived from the action's own `\"Entity.Verb\"` prefix, which is wrong for `Account.SetLogo`/`RemoveLogo`/`SetBanner`/`RemoveBanner` (prefixed `Account`, recorded against `FarmLogo`, a shared row per `FarmLogo.cs`).\n- Purely client-side narrowing: `/api/v1/audit` still filters on `action` alone, same as before — no backend change, no new query param sent.\n- Changing \"Record type\" clears a now-mismatched `action` so a hidden filter can never keep querying against a type no longer shown.\n- `entityType` is a third URL search param, independent of the existing `action`/`entityId` params from #493.\n\nCloses #520.\n\n## Test plan\n- [x] `npm run typecheck` clean\n- [x] `AuditPage.test.tsx` (46 tests) + `enums.test.ts` — narrowing, action-reset-on-type-change, URL round-trip, garbage-query-value fallback\n- [x] Full web suite: 1776/1776 passing\n- [x] Local pi (deepseek-v4-flash) review pass\n**_{_{![P2 Badge](https://img.shields.io/badge/P2-yellow?style=flat)}} Normalize incompatible type/action URLs**\n\nWhen a shared or hand-edited URL contains a valid but incompatible pair such as `?entityType=Flock&action=User.Create`, this list omits the selected action, so the Action control visually falls back to “All actions” while `fetchPage` continues querying `User.Create`. Validate `actionFilter` against `availableActions` and clear or ignore it when the pair is incompatible so a hidden filter cannot produce misleading results.\n\nUseful? React with 👍 / 👎.\n**_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Document the new cascading filter**\n\nThis adds a user-visible control with non-obvious semantics—the record type narrows the Action choices but does not itself filter audit rows—without updating the SPA Help page or its in-app glossary. Add guidance to the Audit help section so users can understand the two-step filtering behavior, as required for every user-visible behavior change.\n\nAGENTS.md reference: [AGENTS.md:L251-L251](https://github.com/mforce/cluckwork/blob/a34ab607cf2c04067f549eca064294f8bf31b629/AGENTS.md#L251-L251)\n\nUseful? React with 👍 / 👎.\n\n### 💡 Codex Review\n\nHere are some automated review suggestions for this pull request.\n\n**Reviewed commit:** `a34ab607cf`\n \n\n

ℹ️ About Codex in GitHub

\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n

\nFixed in 983af91: `actionFilter` is now validated against `availableActions` for the current `entityTypeFilter` and ignored (not just reset on a dropdown click) when the URL's action isn't in scope for its type — closes it for both a manual click and a direct/shared URL load. Mutation-verified: reverting the validation makes the new test fail on its own `action: undefined` assertion.\nAdded in 983af91: a new Help bullet (auditRecordTypeFilter, en/es/tl) explaining the two-step narrow-then-filter behavior, plus a GLOSSARY.md entry (#520). Full web suite green (1778/1778), typecheck clean.",{},"created",1786586481.24851,"Completing the task","event_type","info",{"_95":430,"_99":96,"_422":5640},{"_95":909,"_910":911},"partial_repo_snapshot","files",[912,913,914,915,916],{"_164":5393,"_918":-5,"_919":5394,"_921":-5},{"_164":4848,"_918":-5,"_919":4849,"_921":-5},{"_164":4473,"_918":-5,"_919":4474,"_921":-5},{"_164":1848,"_918":-5,"_919":1849,"_921":-5},{"_164":917,"_918":-5,"_919":920,"_921":-5},"specs/product/GLOSSARY.md","contents","line_range_contents",[922],"missing_reason",{"_923":687,"_924":925,"_422":926,"_927":62},"line_range_start","line_range_end",1041,[928,202,929,930,931,202,932,202,933,934,935,202,936,937,202,938,939,202,940,941,202,942,202,943,944,945,946,947,948,949,202,950,951,202,952,953,202,954,955,956,957,958,959,960,961,962,963,202,964,202,965,966,967,968,969,970,971,972,973,202,974,975,976,977,978,979,980,981,982,983,202,984,202,985,986,987,202,988,989,990,991,992,993,202,994,995,996,997,998,999,202,1000,1001,1002,1003,202,1004,1005,1006,1007,1008,202,1009,1010,1011,1012,1013,1014,1015,1016,202,1017,1018,1019,202,1020,1021,1022,1023,1024,1025,202,1026,1027,1028,1029,1030,202,1031,1032,1033,1034,1035,202,1036,1037,1038,1039,1040,202,1041,1042,1043,1044,1045,1046,1047,1048,1049,1050,1051,202,1052,1053,1054,1055,1056,1057,202,1058,1059,1060,1061,1062,1063,1064,1065,202,1066,1067,1068,1069,1070,202,1071,1072,1073,202,1074,1075,202,1076,1077,1078,1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,1095,1096,1097,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,202,1111,1112,1113,1114,1115,1116,1117,1118,1119,202,1120,1121,1122,1123,1124,1125,1126,1127,1128,1129,202,1130,202,1131,1132,1133,1134,1135,202,1136,1137,1138,1139,1140,1141,1142,1143,202,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,202,1157,1158,1159,1160,202,1161,1162,1163,1164,1165,1166,202,1167,1168,1169,1170,1171,1172,202,1173,1174,1175,1176,1177,1178,1179,202,1180,1181,1182,1183,1184,1185,202,1186,1187,1188,202,1189,1190,1191,202,1192,1193,1194,1195,1196,202,1197,202,1198,1199,1200,1201,1202,1203,1204,1205,202,1206,1207,1208,1209,202,1210,1211,1212,1213,202,1214,1215,1216,1217,1218,1219,1220,202,1221,1222,1223,1224,1225,1226,1227,1228,1229,1230,1231,202,1232,1233,1234,1235,1236,1237,202,1238,1239,1240,1241,1242,1243,1244,202,1245,202,1246,1247,202,1248,1249,1250,1251,1252,1253,202,1254,1255,1256,1257,1258,1259,1260,1261,1262,1263,1264,202,1265,1266,1267,1268,1269,202,1270,1271,1272,1273,202,1274,1275,1276,1277,1278,1279,1280,1281,1282,202,1283,1284,1285,1286,1287,1288,1289,202,1290,1291,1292,1293,1294,1295,1296,1297,1298,202,1299,1300,1301,1302,1303,1304,1305,202,1306,1307,1308,1309,1310,1311,1312,202,1313,1314,1315,1316,1317,1318,1319,202,1320,1321,1322,1323,1324,1325,1326,202,1327,1328,1329,1330,1331,1332,1333,1334,1335,1336,1337,1338,202,1339,1340,1341,1342,1343,1344,1345,1346,1347,1348,202,1349,1350,1351,1352,1353,1354,1355,1356,202,1357,1358,1359,1360,1361,1362,1363,1364,1365,1366,202,1367,1368,1369,1370,1371,202,1372,1373,1374,1375,202,1376,1377,1378,1379,1380,1381,1382,1383,1384,1385,1386,1387,202,1388,1389,1390,1391,202,1392,1393,1394,1395,1396,1397,1398,1399,1400,1401,1402,202,1403,1404,1405,1406,202,1407,1408,1409,1410,1411,1412,1413,202,1414,1415,1416,1417,1418,202,1419,202,1420,1421,1422,202,1423,1424,1425,1426,202,1427,1428,1429,1430,1431,1432,202,1433,1434,1435,1436,1437,1438,1439,1440,202,1441,1442,1443,1444,1445,1446,1447,1448,202,1449,1450,1451,1452,1453,1454,1455,1456,202,1457,1458,1459,1460,1461,1462,1463,1464,202,1465,1466,1467,1468,1469,1470,1471,202,1472,1473,1474,1475,1476,1477,1478,1479,1480,1481,1482,202,1483,1484,1485,1486,1487,1488,1489,1490,1491,202,1492,1493,1494,1495,1496,1497,1498,1499,202,1500,1501,1502,1503,1504,1505,202,1506,1507,1508,1509,1510,1511,1512,1513,1514,1515,1516,1517,1518,1519,1520,1521,1522,202,1523,1524,1525,1526,202,1527,1528,1529,1530,1531,1532,1533,1534,1535,1536,1537,202,1538,1539,1540,1541,1542,1543,1544,1545,1546,202,1547,1548,1549,1550,1551,1552,1553,1554,1555,1556,1557,1558,1559,1560,1561,1562,1563,1564,1565,1566,1567,1568,1569,1570,1571,1572,1573,1574,1575,202,1576,1577,1578,1579,1580,1581,1582,1583,1584,1585,1586,1587,1588,1589,202,1590,1591,1592,1593,1594,1595,202,1596,1597,1598,1599,1600,1601,1602,1603,1604,1605,1606,1607,1608,1609,1610,1611,1612,1613,1614,1615,1616,1617,1618,202,1619,1620,1621,1622,202,1623,1624,1625,1626,1627,1628,1629,1630,1631,1632,202,1633,1634,1635,1636,1637,1638,202,1639,1640,1641,1642,1643,1644,1645,202,1646,1647,1648,1649,202,1650,1651,1652,1653,1654,1655,1656,1657,1658,1659,1660,202,1661,1662,1663,1664,1665,1666,1667,1668,1669,1670,1671,1672,1673,1674,1675,202,1676,1677,1678,1679,1680,1681,1682,1683,1684,1685,1686,1687,1688,1689,1690,1691,202,1692,1693,1694,1695,1696,1697,1698,1699,1700,1701,1702,1703,1704,1705,1706,1707,1708,1709,1710,1711,1712,1713,1714,1715,1716,1717,1718,1719,1720,1721,1722,1723,1724,1725,202,1726,1727,1728,1729,1730,1731,1732,1733,1734,1735,1736,1737,1738,1739,1740,1741,1742,1743,1744,1745,1746,1747,1748,1749,1750,1751,1752,1753,1754,1755,1756,1757,1758,1759,1760,1761,1762,1763,1764,1765,1766,202,1767,1768,1769,1770,1771,1772,1773,1774,1775,1776,1777,1778,202,1779,1780,1781,1782,1783,1784,1785,1786,1787,1788,1789,202,1790,1791,1792,1793,1794,1795,1796,1797,1798,1799,1800,202,1801,1802,1803,1804,1805,1806,1807,202,1808,1809,1810,1811,1812,1813,1814,1815,1816,1817,1818,1819,202,1820,1821,1822,1823,1824,1825,1826,1827,1828,202,1829,1830,1831,1832,1833,202,1834,1835,1836,1837,1838,1839,202,1840,1841,1842,202,1843,1844,1845,1846,1847],"contains_end_of_file","# Cluckwork glossary — key concepts","Domain concepts as the app uses them. For the full requirements see","[specs.md](./specs.md); for architecture see","[../technical/tech_spec.md](../technical/tech_spec.md).","## Birds & flocks","**Flock** — a group of birds managed as one unit, defined by breed and","*placement date* (the day the birds were placed in the house). Everything else","— production, mortality, sales — hangs off a flock.","**Placement date** — when the flock entered its house. Age (shown in weeks)","counts from here; laying performance is judged against age.","**Initial count** — birds placed on day one. Never changes with deaths; the","*bird ledger* accounts for those.","**Current birds** — `initial count − Σ bird movements`. Computed from the","ledger, never stored.","**Bird movement** — one row in the append-only bird ledger. Types:","- **Mortality** — birds that died on their own. Generated automatically when a"," daily entry is submitted; never entered by hand (that would double-count).","- **Cull** — birds deliberately removed alive: spent hens sold at end-of-lay,"," sick birds removed to protect the flock, poor layers. Always positive.","- **Adjustment** — count correction after a recount. May be negative (adds"," birds back). Corrections are always *new* rows — ledger rows are never"," edited or deleted.","**Spent hen** — a hen past her productive laying period (typically ~72–80","weeks); usually culled and sold for meat.","**Flock lifecycle** — `Active → Depleted → Archived` (archive is also allowed","straight from Active for mistake-created flocks):","- **Active** — laying; accepts daily entries and movements for any date.","- **Depleted** — birds are gone. Still visible in lists and history. Accepts"," *backfill* only: entries/movements dated on or before the depletion date"," (the final laying days are often entered late).","- **Archived** — hidden bookkeeping. Gone from pickers and the dashboard,"," visible on the Flocks screen behind a toggle; accepts nothing new. Historic"," data keeps rendering its name.","- **Reactivate** — the undo: a Depleted or Archived flock returns to Active."," Its lifecycle dates are cleared, so full capture (any date) is restored. A"," flock archived after depletion carries both dates; reactivation clears both.","## Getting around","**Navigation** — where the app's screens live. Above 900px wide they sit in the","aubergine **sidebar**, grouped by job (Overview, Production, Sales & stock,","Insights, Setup, Help). Below 900px — a phone — the sidebar gives way to a","**bottom tab bar**: the four most-used destinations the current role can reach,","plus **More**, which opens a sheet with the complete grouped list. The four","tabs are chosen per role from a fixed priority order (Daily entry, Stock, Sales,","History, …), so a worker leads with Daily entry and a ReadOnly viewer, who has","neither production nor sales, leads with Stock. Both navs are built from one","model, so the role gates cannot drift between them.","**\"Something went wrong\" screen** — the error-boundary fallback. If a screen","throws while rendering, the app catches it and shows this — a short message,","**Reload**, and **Back to the dashboard** — instead of unmounting to a blank","page (the failure mode #138 hit on a phone). The screen boundary keeps the nav","shell around it, so the rest of the app stays reachable; a second boundary wraps","the whole app — outside the auth and router providers — for the rarer case where","the shell or that setup itself throws. The error text","sits under a collapsed **Error details** for a support screenshot. It catches","render/lifecycle throws only — event-handler and network failures still surface","as each screen's own inline error.","## Production","**Daily entry** — one flock's production record for one operational day: total","eggs, loss counts (cracked / dirty / discarded), mortality count, and the","graded breakdown of sellable eggs. One entry per flock per day (natural key).","**Daily entry steps (#134)** — the capture screen is two numbered panes side by","side: **1 Egg counts** and **2 Grading**. Flock and date sit above them as","context, not as a step — they say *which* day is being recorded, not part of","recording it. The two panes reconcile: the **sellable** figure the counts","produce is the target the grades have to hit, so they are placed where both can","be read at once.","The **adjust** dialog (#403) presents the same form: the same two numbered panes","in the same order, the same **Left to grade** chip, the same **steppers**, and","the same **Put all in…** remainder shortcut. So every term defined below for","capture means the same thing when correcting a day, and a correction is read the","way the day was recorded. Only what is genuinely the dialog's own — the reason","field, and the *previously adjusted* note — is particular to it.","What is literally shared is the reconciliation arithmetic and the chip and","remainder controls; each screen still renders its own form and owns its own","state and submission. So the two can drift, and keeping them saying the same","thing is a review obligation, not something the code enforces.","**Condition grade (#396)** — the Cracked and Dirty grades, fed by the Daily","Entry's own **counters** rather than by a hand-typed grade line. A farm may sell","them as separate stock (both are saleable on a new installation) or keep them as","losses by switching either off; **Discarded** is always a loss and is never a","condition grade.","Two things make the binding safe to rename around. The grade carries a fixed","**kind** (`Cracked` / `Dirty`) rather than being matched on its name, so renaming","\"Cracked\" to \"Segunda\" does not detach the counter from the grade. And the entry","**snapshots** which grade each counter resolved to at the moment it became","official — so turning a grade off later never rewrites a past day, and turning","one on never invents stock for a day recorded as a loss. Resolution requires the","grade to be **both active and saleable**; anything else records the condition as","a loss.","A condition grade can never be entered as a manual grade line — the server","refuses it, not just the screen. Its counter already produces a lot, so a manual","line naming it would produce a second lot for the same grade on the same day.","**Condition (Reports / History column, #396)** — the eggs a day produced that","became stock **without being hand-graded**: the condition counters above, counted","only where that entry resolved them to a grade. Deliberately shown beside","**Sellable** rather than added into it — Sellable is the hand-graded remainder","and the figure grading counts down to, so the two answer different questions and","are added together to get everything the day produced that can be sold.","**Left to grade (#134)** — grading counts **down** to zero rather than reporting","*graded n of m*. The figure beside the grades is how many sellable eggs are","still unaccounted for; it turns green when the day adds up exactly and red when","the grades overshoot the sellable count. Submitting is blocked unless it reads","**exactly zero** (#394) — short of sellable is refused just as much as over.","**Entry footer (#134)** — both saves sit in a bar pinned to the bottom of the","screen, along with save messages: anything below a pinned bar scrolls underneath","it and is never read. On a phone the two panes stack and scroll away, so the bar","also carries a compressed *n sellable · n left*; on a wider screen both panes are","already visible and repeating it would be noise.","**Steppers (#134)** — every count and grade field has **−** and **+** buttons","either side. Holding one repeats, widening its stride from 1× to 5× to 10× of","the counting unit, so a few hundred eggs takes about a second. Built for the","barn: the browser's own spinner is a ten-pixel target and disappears entirely","on touch.","**Stepper counting unit (#444)** — how much one tap of **−**/**+** counts by","on the Daily Entry screen (and History's adjust dialog): one egg by default,","or one of the farm's **packed units** (e.g. Tray = +30/−30) for a farm that","counts by the tray rather than the egg. Resolved as: the **user's own","preference** (Account screen, follows them across devices) if set, else the","**farm default** (Settings, admin-set), else Individual. The hold-to-repeat","stride multiplies this base, so a held Tray stepper accelerates in trays.","Only units with an **active** eggs-per-unit definition (the same §9.7 catalog","sales use) can be chosen; if a chosen unit is later deactivated, the stepper","quietly falls back to one egg rather than counting by a retired factor.","Typing stays plain numbers — only the guided control counts by units.","The unit is **visible at the point of touch**: when a pack unit is in force","the buttons themselves read **−30 / +30** instead of bare −/+ (and announce","\"increase … by 30\" to a screen reader), and a caption above the two panes","says which unit is counting and where a tap lands (\"Counting by Tray — each","tap moves 30 eggs\"). At one egg per tap neither appears — plain icons, no","caption — since \"+1\" would just restate the default.","A grade's **+** no longer stops once the day is fully graded (#443) — a farm","that counts the grades before adding them up needs to keep going past","whatever **1 Egg counts** currently says. Grading past the current sellable","figure raises that total to match instead of refusing the tap; it only ever","raises the total, never lowers it, so trimming the total on step 1 never","forces a grade back down. Typing already worked this way; the steppers now","match it. **Over** is still reachable — trim the total below what is already","graded — and it blocks both saves, not just Submit.","**Put all in… (#134)** — hands the entire remainder to one grade in a single","move, for the commonest last step of the day (\"and the rest are Large\"). Drag it","onto a grade, or tap it and pick one. Both routes exist deliberately: dragging","is unavailable on a phone and unreachable from a keyboard, so it is never the","only way. It disappears when nothing is left to place.","**Editing draft (#134)** — a badge beside the title when the day being captured","already has a saved **Draft**, so re-opening work in progress is distinguishable","from starting a fresh day. Only locked days carried a signal before.","**Daily entry lifecycle** (#69) —","`Draft → Submitted → Locked → ManagerAdjusted / Voided`:","- **Draft** — editable; re-saving the same flock+date updates it in place."," Nothing downstream exists yet. History links Draft rows straight back to"," the entry form via **edit** (#85) — open to workers, unlike adjust/void.","- **Submitted** — the day is frozen for workers. Submitting *generates* the"," downstream facts atomically: one **egg lot** per grade line (each lot"," carries a `DailyEntryId` link back to its entry), and a **mortality"," movement** if the count is > 0.","- **Locked** — stamped automatically once a submitted entry is strictly"," older than 7 farm-local days (spec §8.1 default; background sweep)."," Locked ≠ untouchable: admins can still adjust or void.","- **ManagerAdjusted** — an admin corrected the totals/grades of a"," submitted or locked entry (reason required). The correction is made in"," the **Daily entry** two-step form itself (#403) — the same panes, chip"," and remainder shortcut described above — so an admin fixing a day works"," the way the day was captured, and the reconciliation feedback is the"," same feedback rather than a second interpretation of it. An adjustment"," has no draft state of its own, so it is held to the same **exact"," reconciliation** as submit (#394): the corrected grades must sum to"," exactly the corrected sellable count, with no partial-save escape"," hatch. The correction"," reconciles the entry's egg lots in the same transaction — grown, shrunk,"," added, or emptied — but **never below what a lot already sold**, and"," appends a compensating bird movement for any mortality change. The"," replaced values are kept as an audit snapshot on the entry until the audit"," log lands. Adjusting again is allowed; each adjust snapshots what it"," replaced.","- **Voided** — an admin undid the whole entry (reason required): every lot"," it generated is emptied (refused if any of its eggs were sold), the"," day's mortality is reversed by a compensating movement, and the entry is"," preserved as Voided. Mirrors the sales void (#60): compensating rows,"," never deletions. Voiding **vacates the day** (#82): the same"," house/flock/date can be recorded again as a fresh entry — the natural-key"," uniqueness is enforced only across live (non-voided) entries. Entries"," submitted before lot-to-entry tracking existed can't prove which lots are"," theirs and refuse adjust/void.","**Sellable cap** — graded quantities must fit in","`total − cracked − dirty − discarded`. You cannot grade more eggs than","survived the day. This is the only rule a **Draft** enforces — a draft may be","graded partially, or not at all, and still be saved. Since #443 the capture","screen keeps the two sides from colliding on its own — grading past the","current total raises the total to match — so this cap is normally satisfied","by construction rather than by refusing input. It still applies: trimming the","total below an already-graded sum reaches it, and both saves are blocked (the","same **Left to grade** chip turns **over**) until the numbers agree again.","**Grade reconciliation (#394)** — **Submit**, and **saving an adjustment**","(which has no draft state of its own to leave incomplete), both go further","than the sellable cap above: the grade lines must sum to *exactly*","`total − cracked − dirty − discarded`, not merely fit within it. Zero","sellable eggs validly reconciles to zero grade lines — a day where every","egg was lost needs no grading to submit. Short of sellable and over","sellable are refused the same way, at both the domain and the API layer,","so a direct API caller cannot bypass it any more than the SPA can. This","closes the gap where an ungraded, no-loss day could submit cleanly and","silently produce zero stock for real production.","## Grading & stock","**Egg grade** — a per-farm grading bucket (spec §9.1). The seeded defaults are","sizes (Small/Medium/Large/Jumbo), qualities (Seconds/Cracked/Dirty/Soft","Shell), and custom buckets (Discarded/Internal Use), but the catalog is fully","user-managed. `gradeType` (Size/Quality/Custom) records which axis a bucket","is on and is immutable after creation.","**Egg movement ledger (#101)** — every change to a lot's available quantity","is an explicit, append-only signed row (spec §9.4): `Production` when a","submitted entry creates the lot, `Sale` per confirmed allocation, `Void` when","a sale or entry void returns/vacates eggs, `Adjustment` for manager","corrections, and `Discard` / `InternalUse` / `Reconciliation` for stock","write-offs (see below). Written in the same transaction as the lot change, so","the cached `QuantityAvailable` always equals the sum of the lot's movements —","the tech-spec rule that cached balances must be rebuildable from ledgers.","**Stock write-off (#406)** — an Owner/Manager correction that removes lost","eggs from a specific lot (breakage, spoilage, theft → `Discard`; farm","consumption → `InternalUse`) or applies a recount (`Reconciliation`, which","alone may also add eggs back), with a required reason. It moves only the","lot's available quantity — the daily entry's production figures and hen-day %","are never restated, which is what separates it from a daily-entry adjustment.","Available is floored at zero — a write-off can never consume eggs already","sold — and a positive recount is capped at the lot's cumulative write-off","total (never at raw production: eggs allocated to a confirmed order must not","read as headroom, or they'd be sold twice). A recount beyond that means","production or a sale is wrong, which have their own paths. Withdrawal","restriction does not block a write-off — restricted eggs spoil too, and","removing stock is the safe direction.","**Saleable** — grades flagged saleable can receive graded production and be","sold on orders. Non-saleable grades are bookkeeping buckets — losses are","captured by the daily entry's counters, not grade lines. Names are unique per","farm, case-insensitively.","**Product (#97)** — what the farm sells (spec §10.1). Phase 1 supports egg","products only: each maps to exactly one egg grade (sales will draw from that","grade's lots), carries a selling unit (dozen/tray/carton/…), an optional","default price, and a currency snapshotted from the account at creation. The","product type is immutable; deactivation hides a product from pickers while","history keeps it. Names are unique per account, case-insensitively.","**Packed unit (egg unit conversion) (#97)** — how many individual eggs a","selling unit holds (spec §9.7). No fixed factors: a carton is 12, 18, or 30","eggs depending on the market, so each account defines its own (defaults:","dozen 12, flat/tray 30, carton 12, case 360; individual is always 1 and","immutable). Sales lines will snapshot the factor at line creation — redefining","a unit never reinterprets recorded orders.","The unit is visible at the point of entry (#445): a sales line's quantity","counts *units, not eggs*, so the add-line form names the unit in the quantity","label (\"Quantity (tray)\"), previews the resulting egg count live while typing","(\"= 60 eggs\"), and shows the unit size on the product picker option (\"(30","eggs/tray)\") — typing the egg total where the unit count belongs (a 30×","oversale) is visible before the line is added, and the eggs column tracks an","inline quantity edit the same way.","**Deactivated grade** — removed from capture and order pickers; existing","stock stays counted and order lines added before deactivation can still","confirm, but the grade cannot go on *new* order lines (`AddOrderItem`","rejects inactive grades) — reactivate to sell remaining stock. History keeps","resolving the name. Grades are never hard-deleted (historic rows reference","them forever).","**Egg lot** — a batch of sellable eggs: flock + production date + grade +","quantity. Created only by submitting a daily entry. Stock is the sum of lots'","available quantities per grade.","**FIFO allocation** — confirming a sale draws eggs from the *oldest* lots of","that grade first, under a pessimistic row lock so two sales can never","allocate the same physical eggs.","**Withdrawal restriction** — a lot flagged `RestrictedUntil` a date (bird","medication withholding periods). Restricted quantities show in stock but are","blocked from sale until the date passes. **Schema + enforcement only today:","no production path sets a restriction yet** — that arrives with medication","tracking (spec §13). Until then the system does not enforce withdrawal times.","## Feed & inventory","**Inventory item** — a catalog entry (spec §12.1): what a thing is, its","category (Feed/Supplement/Additive/Medication/…), and its **unit of","measure**. All categories support purchases, stock, and corrections; only","*flock feed usage* is limited to Feed/Supplement/Additive. The unit locks","once stock has been received — recorded quantities must never be silently","reinterpreted in a different unit. Names are unique per farm,","case-insensitively; items deactivate rather than delete (deactivation blocks","new purchases; remaining stock can still be used up).","**Inventory lot** — a received batch of an item: received date, quantity,","per-lot unit cost, optional supplier lot number/expiry. Created by recording","a **purchase**. Stock on hand for an item = the sum of its lots' remaining","quantities. Quantities are decimals (feed is weighed, not counted).","**Inventory movement ledger** — append-only audit trail (spec §12.3): every","purchase, usage, adjustment, and discard is a row with a signed quantity.","Rows are never edited or deleted — mistakes get a *compensating* row. Lots","hold the balance; the ledger explains it.","**Feed usage** — a feeding event: flock + date + item + quantity. Draws down","the item's lots **oldest first (FIFO)**, only from lots that existed on the","usage date, and records an estimated cost from the actual lots consumed","(feed-cost KPIs, spec §19). Usage records are create-only; only","Feed/Supplement/Additive items can be fed to a flock. Same lifecycle rule as","production: depleted flocks accept backfill up to their depletion date,","archived never.","Recorded on the **Feed page** (#446) — its own capture form plus the feed","history (filterable, paginated, with per-row estimated cost); an item's","Inventory panel deep-links there with that item preselected. Each feed and","water record also carries a **daily-entry link**: the non-voided daily entry","that existed for the same flock's (farm, house, flock, date) *at the moment","of recording*, or nothing if the day's entry didn't exist yet. The link is","best-effort provenance — it is never backfilled when the entry arrives","later, never changed by a water correction, and a later void of the entry","does not clear it. Flock + date remains the authoritative way the app joins","feed/water to a day (the Daily Entry page's own summary strip joins that","way), so an empty link never hides a record.","**Adjustment / Discard** — the correction path for stock: a signed ledger row","against a specific lot (reason required). Negative fixes an over-entered","purchase or writes off spoiled feed (Discard); positive undoes an","over-recorded usage, capped at the lot's received quantity — genuinely new","stock is a purchase, not an adjustment. A lot can never go below what's","already been consumed.","**Water usage** — water consumed by a flock on a day (spec §12.5): direct","quantity in L/gal, or derived from meter start/end readings (the delta; when","both quantity and meters are given they must agree). No inventory behind","water, so records are **editable in place** (Version-guarded) rather than","corrected via compensating rows — the one create-then-edit record type.","Flock and date are fixed after creation. Same lifecycle gate as production","and feed.","## Sales","**Customer** — name + phone required; email/address/note optional. No","payments and balances (spec §10.11, shipped #89).","**Sales order lifecycle** — `Draft → Confirmed → Voided` (or `Draft →","Cancelled`): drafts are fully editable (add/edit/remove lines, cancel);","**confirming** allocates stock FIFO. A mistaken confirm is undone by","**voiding** — never by editing a confirmed order. (`Shipped`/`Invoiced`","exist in the status enum for later phases; nothing sets them yet, and only","`Confirmed` orders can be voided.)","**Sales line (#99)** — sells a **product** in a packed unit. At line creation","the line snapshots the product type, the grade the product mapped to, and the","unit's eggs-per-unit factor (`base_unit_factor`, spec §10.5/§9.7); `quantity`","is selling units and always a whole number — the add/edit-line controls","reject a fractional value before sending, and a direct API request gets a","stable validation response rather than a raw JSON-binding error (#398) —","while `quantity_base = quantity × factor` is individual eggs; allocation and","the stock guard run on `quantity_base`. Re-pointing a product's grade or","redefining a packed unit only affects future lines, never recorded ones.","Price is per selling unit (decimal money, stored as integer minor units),","prefilled from the product's default and editable per line.","**Void** — undo of a mistaken confirm (requires a reason): the allocated","quantities return to the *exact* egg lots they were drawn from (recorded at","confirm as lot-level allocations), preserving FIFO order and any withdrawal","restriction. The order stays listed as `Voided` with its lines and total —","this is not returns processing for delivered goods.","**Money** — stored as integer *minor units* plus a currency code snapshotted","from the account onto each order (JPY has 0 decimals, USD 2 — the snapshot","records that too). Totals are recalculated from lines on every mutation,","never incrementally patched.","**Audit log (#93)** — append-only record of every corrective, destructive,","or configuration change (the admin-gated action set): actor (user id +","email snapshot), UTC timestamp, action code, entity reference, the reason","where the command carried one, and a small details payload. Domain data,","not telemetry (tech spec): written **in the same transaction** as the","change — a rollback erases the event with the change, and there is no","update or delete surface anywhere. Admin-only viewer at /audit. The","entity-local snapshots (`AdjustedFromJson` etc.) remain — they are the","record's own history; the audit log is the cross-cutting trail.","**Record history (#494)** — the \"Created by … / Last changed by …\" column on","the Flocks, Egg grades, Daily entry history, Sales and Expenses tables. Not a","stored field: it is **derived from the audit log**. Creation is the record's","`*.Create` event — identified by the action, never by being first on the trail,","because two events can share an instant and their order is then unknowable.","Creation itself became an audited action for these five in the same change","(`Flock.Create` and siblings) — before that only corrections were on the trail.","The last change is the latest event that is neither that creation **nor a","promotion by the person who created it**. A *promotion* is the action that turns","a draft into the official record — `DailyEntry.Submit` and `SalesOrder.Confirm`,","the two moments that mint or allocate stock. That exception is what makes the","common case read correctly: saving a daily entry and submitting it are two events","but one act, so a farmhand who writes the day's numbers and makes them official —","changing nothing in between — is shown as the creator with no change against","them. When somebody *else* submits the draft, that submit is a real change and","both people are named, which is the accountability the submit step exists for.","Suppressing the promoter's *name* must not lose the promotion's *time*, so the","column also carries **when** the record became official — \"Submitted …\" on a","daily entry, \"Confirmed …\" on a sales order — shown whoever did it. That instant","is when stock is minted or allocated, and it lives nowhere else on the record's","own page: a daily entry stores no submission timestamp of its own, only","`LockedAtUtc`. Blank for a draft awaiting promotion, and absent entirely on","flocks, egg grades and expenses, which have no promotion step.","The exception covers **drafting** — the creator's own edits to their own draft,","and the promotion that ends it — and nothing else. Correcting a locked entry","always shows, including when the corrector created it. So does **cancelling** a","draft order: `SalesOrder.Cancel` kills the record rather than making it official,","so cancelling your own order stays a reportable change. It is keyed on the action","*and* the actor together, which is why the same draft edit is hidden for the","person who created the record and shown for anybody else.","Editing a draft **is** recorded, even though it alters no stock, because it is","the only thing binding a person to the numbers. Without it, someone who rewrites","a colleague's draft before it is submitted leaves no trace and the submitter is","credited with their work. The rule above is what keeps that quiet in the ordinary","case: your own edits to your own draft are part of writing it, so they are hidden","along with your own submit, and only a **different** person's edit surfaces as a","change.","That hiding stops the moment the draft stops being yours alone. **Once somebody","else has edited it, your own later edits are shown too** — because by then they","are the answer to \"whose numbers are these\". Hiding them named the colleague","whose work you overwrote and dated the record to an edit that no longer exists","in it, while the numbers that went into stock were yours. Your own *promotion*","stays hidden even here: it has its own \"Submitted …\" line, and repeating it as","the last change would say that making a record official changed it.","Two further consequences follow from being derived rather than stored. A record","created **before #494** has no creation event and is **never backfilled**, so it","shows no \"created by\" line — but that half is independent of the rest: if it has","since been changed, that change still shows, with the created line simply absent.","The column is entirely blank only for a record with nothing on the trail at all.","And who can see it is exactly who could already read the record — it adds","no gate of its own, so a worker reading their own daily entry also sees which","manager corrected it. The actor is shown as the plain **email snapshot** the","audit log already keeps, deliberately not a live-joined name: a later rename or","disable must not rewrite what old history displays. Distinct from the audit","log's own admin-only viewer at /audit, which is the full cross-cutting trail —","this is the one-line summary on the record's own page.","**Entity-scoped audit history (#493)** — the bridge between the two. An","\"Audit history\" link on a record's own screen (the same Flocks, Egg grades,","Daily entry history, Sales and Expenses tables #494's summary covers) opens","the admin-only /audit viewer pre-filtered to that one record (`?entityId=`),","reusing the `entityId` filter the endpoint already supported server-side but","that nothing called until this feature. Not a new surface: same viewer, same","admin gate, same action-type filter — just scoped. Distinct from the","record-history summary above in the same way the summary itself is distinct","from the full log: the summary is two points (created, last changed), the","scoped view is every event on the record, in order.","Egg lots get the **narrower** \"Adjustment history\" link instead, deliberately","labeled differently. The only audit action ever written against an egg lot's","own entity id is a manual write-off or recount (`EggLot.Movement`) — creation","is recorded against the daily entry that produced the lot, allocation and","restoration against the sales order, never against the lot itself. Labeling","this link \"Audit history\" like the other five would promise a full lifecycle","the data can't deliver: a normal, never-adjusted lot shows nothing at all","under that scope. \"Adjustment history\" says exactly what it shows.","**Record-type filter (#520)** — a second dropdown on the /audit viewer,","ahead of the existing action filter. Picking a record type (Flock, Sales","order, User, …) does not query anything itself — it narrows the action","dropdown's option list to only the actions actually recorded against that","type, so an admin who knows *what kind of record* they're after isn't","scanning one flat list of every action the farm can log to find it. The","mapping from action to type is read off the server's own audit-write call","sites, not the action code's own \"Entity.Verb\" prefix — the four","`Account.Set/RemoveLogo/Banner` actions are prefixed `Account` but recorded","against `FarmLogo`, a row shared by both the logo and the banner.","**Hen-day % (#91)** — eggs collected ÷ hen-days × 100 (spec §19.3). A","hen-day is one bird alive for one day; the day's bird count comes from the","bird ledger (placements + movements). The production report shows it per","day and for the whole period (period eggs ÷ period hen-days — not an","average of daily percentages).","**Production report (#91)** — per-day official production over a range","(Draft entries aren't submitted, Voided ones vacated their day — neither","counts): eggs, losses, sellable, deaths, hen-day %, period totals, grade","breakdown. Open to workers — it is their own recorded work.","**Report query bounding + concurrency limit (#311)** — every report (production,","sales, expenses, profit) is bounded to a validated range (default the last 7","days, capped at 366 — see Production report above) and its aggregation runs in","SQL rather than loading the account's full history into memory, so cost tracks","the requested range and flock count, not the farm's lifetime of data. On top of","that, concurrently in-flight report requests are capped **per account** (a","small default, e.g. 4 at once): a request over the cap gets HTTP 429 with a","`Retry-After` header instead of queueing or running unbounded — a documented,","retryable \"try again shortly,\" never a silent hang or a degraded shared","service. One account's usage never affects another's — each account has its","own bucket, mirroring the per-IP auth rate limiting (#143) above but keyed by","account instead of client address, since a report is behind auth.","**Profit, basic (#91)** — confirmed order revenue − recorded expenses for","the range, both operands shown. Deliberately no COGS or inventory","valuation; those belong to a later accounting slice. Admin-only, as are","the sales and expense summaries.","**Payment (#89)** — money in against a **confirmed** sales order (spec","§10.11): date, amount in minor units, method (cash / check / card / bank","transfer / mobile payment / other), optional reference and note. The","currency copies from the ORDER at creation. Partial payments are normal;","**overpaying the outstanding amount is refused** (checked under the order's","row lock, so racing payments can't overshoot). A wrong payment is **voided**","with a reason — never deleted — and the outstanding grows back. An order","with non-voided payments refuses to void (\"void the payments first\").","Recording and viewing payments is the Sales tier (Owner/Manager/Sales,","spec §5.1); voiding a payment is corrective (Owner/Manager only), like every","other undo.","**Outstanding balance (#89)** — per order: confirmed total − non-voided","payments; per customer: the same summed across their confirmed orders","(server-side sums, never client-aggregated pages). Shown on the order's","payments panel and the Customers page (admins).","**Expense (#87)** — a money-out record (spec §16, basic cut): date, category,","description, amount in minor units, optional flock link, optional note. The","currency snapshots from the account at creation and is never editable — a","later currency change must not re-denominate recorded spending. Corrections","edit in place under the Version token (mismatch → 409, the F16 water","pattern); there is no delete. Expenses are **admin-only end to end**, reads","included — the money/production split.","**Expense category (#87)** — per-farm buckets (\"Feed\", \"Vet\"), name unique","per farm case-insensitively (precheck + `lower(Name)` index, the grade","pattern). Deactivating hides a category from new expenses; recorded ones","keep it (grandfathering). List/sum endpoints report a server-side period","total — clients never sum pages.","## Cross-cutting","**Account** — the tenant. Every row carries `AccountId`; the API enforces","isolation with EF global query filters. Single-farm login today, multi-tenant","infrastructure dormant.","**Farm / House** — physical hierarchy. Present as ids from day one, but real","Farm/House management arrives with later phases; the MVP runs on one seeded","farm and house. The farm's *settings* are already real (see below) — they live","on the account row while there is exactly one farm.","**Farm settings (#123, spec §4.5)** — the farm's own name plus the four things","that decide how it reads: **timezone**, **locale**, **currency**, and **unit","system**, with optional **first day of week** and date/time format overrides.","Owner and Manager can edit them; everyone reads them, because formatting money,","dates and numbers is not a permission. They live on one screen — **Setup → Farm","settings** — which is also where the logo is uploaded and cleared.","What each one *does today* is not yet what it will do. The **timezone** is fully","wired: it decides the operational day, and every capture screen's date field","follows it the moment it is saved. **Locale**, **unit system** and the","date/time **format overrides** are stored and validated, and nothing renders","through them yet — money still prints as `12.34 USD` and dates as ISO. They are","recorded now so the display work (#45, the i18n infrastructure) has settings to","read rather than a migration to run; the settings screen says as much rather","than promising an effect the app does not yet have.","Each one has teeth. The **timezone** is the farm's **operational day** — change","it and every date rule moves with it the same minute, so a timezone that the","system cannot resolve is refused outright rather than stored (the clock refuses","to guess a date, so an unusable zone must never reach the column). The","**locale** must name a real region — `en-US`, not `en` — because a region is","what carries number and date conventions. Saving uses the same **version","(concurrency token)** as everything else: whoever saves second against a stale","copy gets a 409 and reloads.","**Farm logo (#123)** — an image shown as branding in the app chrome, falling","back to Cluckwork's own branding when none is set. Owner and Manager can upload","or clear it; everyone sees it. **PNG, JPEG or WebP, up to a configurable cap (2 MB by default) and 4096","pixels a side, and it must be a still image.** SVG is refused: it is a document that","can carry script, and this image is rendered back to every user of the farm.","Animated PNG and animated WebP are refused too — an animated frame can hide","data inside itself where the check that cleans the rest of the file never","looks.","The chrome renders it in a short row — a fixed height (~24px, about a line of","text) with the width following the image's own aspect ratio, bounded so a very","wide image cannot crowd the farm name out of the sidebar. So a simple mark and a","**wide wordmark** both read correctly; a wordmark uses the horizontal space","instead of being squashed into a square. What still does not survive that size","is a detailed illustration or a busy scene, which shrinks to something","unreadable — that belongs on the **farm banner**, below, a separate image","entirely.","This was not always so (#179). The slot was originally a fixed 26×26 **square**,","and because it fits the whole image (`object-fit: contain`) a wide logo kept its","aspect ratio and gave up its height, rendering as a sliver — `contain` prevents","cropping, but on a square slot that is exactly what collapses a wordmark. The","guidance then was \"upload a square mark\", which was a workaround for the slot","rather than advice about logos. Two changes retired it: the banner gave detailed","art a home of its own, and the slot itself became height-driven.","**Farm banner (#179)** — a second, independent image: a wide/hero picture shown","full-size on a **post-login splash**, once per login, rather than in the short","sidebar row the logo occupies. A farm can have a logo, a banner, both,","or neither — setting or clearing one never touches the other. Same upload rules","as the logo (PNG/JPEG/WebP, a still image, no SVG, dimensions and metadata","handled the same way — see below), but its own larger size cap (5 MB by default,","since a detailed hero image is typically heavier than a small sidebar mark) and its own","Owner/Manager-only upload and everyone-sees-it read, same as the logo. The","splash is skipped entirely when no banner is set — it is never shown empty, and","never shown on the pre-login screen (that screen has no farm to show a banner","for yet).","What gets stored is never quite the file that was uploaded. The image is taken","apart and rebuilt, which drops two things on purpose: **embedded metadata** — a","photo taken on a phone carries the coordinates of where it was taken, which for","a farm is its address — and **anything appended after the image ends**, which is","the usual way something that is not an image hides inside one. The format is","decided by reading the file, not by trusting its name or what the browser called","it. A picture far larger than it looks is refused too: dimensions come from the","image's own header, so a small file claiming to be 30000 pixels across is turned","away before it can lock up the browser of everyone who loads the page.","**Farm palette** — The accent colour used across the app for everyone on a","farm, chosen by an admin in Farm settings from a curated set (Aubergine,","Forest, Slate, Terracotta). It is farm-wide and applies to every role. Distinct","from **night mode**, which each person sets for themselves on each device: the","two are independent, and choosing a farm palette never changes anyone's","light/night preference. The set is curated rather than free-form because every","palette ships a contrast-checked light and dark pair; an arbitrary colour","cannot be held to that bar.","**Farm locale** — the farm-wide setting (part of **farm settings**, spec §4.5)","controlling how numbers, dates, and currency are formatted and displayed. Must","name a real region code (e.g. `en-US`, not `en`) because regions carry number","and date conventions. Independent of **UI language**: a user reading the","interface in English can still see figures formatted for their farm's chosen","locale.","**Currency change rule (spec §4.6)** — the farm currency can only be changed","while the farm has **written down no amount at all** in the current one: no","sales orders, no payments, no expenses, no priced product, and no feed money","(a purchase, a stock lot, or an item's default cost). Every one of those keeps","the currency it was recorded in and keeps it forever, so changing the farm","currency afterwards would leave the books reading in two denominations at once","— and a catalog price is worse than stale, because an order line that takes it","re-labels the raw number with the *order's* currency: $12.34 sold as ¥1,234.","The spec names the first three; the rest follow the same rule for the same","reason. The settings screen","shows the field locked with the reason before it is tried; the API refuses it","either way, and refuses the whole save, not just that field. A farm that truly","changes operating currency gets a new farm record — history is never","re-denominated. When the change *is* allowed, the currency's **symbol** and","**minor unit** are re-derived from the standard: `JPY` has no decimals, `KWD`","has three, an unrecognized code falls back to showing the code itself and two","decimals.","**Idempotency key** — every write request carries an `Idempotency-Key`","header. Retrying the same key replays the original response instead of","repeating the write — the safety net for flaky barn connectivity and the","backbone of the future offline mode (#50).","**Auth rate limiting (#143)** — the anonymous auth endpoints are throttled per","client IP to blunt password spraying and token replay: **login** strictly","(default 10 / 15 min), **refresh** more loosely (default 60 / 15 min — it also","carries legitimate automatic session traffic, so it must not share login's","budget). Over the limit returns HTTP 429 with a `Retry-After`; the SPA surfaces","it as \"Too many sign-in attempts\" and never tears down an already-signed-in","session. The real client IP comes from the reverse proxy's `X-Forwarded-For`","via the framework's forwarded-headers handling (trusted-proxy networks are","configured; a direct caller can't spoof the header). Limits and trusted proxies","are configuration; in-process (single instance today — distributed limiting","would be a later concern if the API is ever scaled horizontally).","**Account lockout (#128)** — a complement to the per-IP rate limit, working per","**account**: repeated failed logins (default 5) lock that one account for a","cool-off window (15 min), after which even the correct password is refused. The","reply is the SAME generic \"Invalid email or password\" (and PBKDF2 is still paid)","as a wrong password or an unknown email, so neither account existence nor","lockout state is revealed by the response. A successful login clears the","counter, and each failure is counted even under parallel attempts. Where rate","limiting blunts a spray across many accounts from one address, lockout blunts a","focused guess at one account from many addresses.","**Session tokens (#145)** — the short-lived **access token** (15 min) lives only","in the SPA's JavaScript memory and is sent as an `Authorization: Bearer` header;","it is never written to `localStorage`/`sessionStorage`, so an XSS payload has no","durable credential to steal and the 15-minute lifetime bounds any exposure. The","durable **refresh token** is an `HttpOnly; Secure; SameSite=Strict` cookie","path-scoped to `/api/v1/auth` — the browser attaches it automatically and JS","cannot read it. A page reload (memory cleared) silently refreshes against the","cookie to restore the session; an expired/absent cookie lands cleanly on login.","CSRF is covered by SameSite=Strict plus a custom header (`X-Cluckwork-Auth`) that","a cross-site request cannot set. Rotation + theft-detection (single-use, revoke","the whole family on replay) are unchanged — this moved the storage, not the","hygiene. Deploying #145 forces one re-login (the old localStorage token is","purged on first load). Because the refresh token now lives only in the shared","cookie, two tabs refreshing at once would each present the same value and the","second would trip theft-detection, logging both out; refresh is therefore","**serialised across tabs** via the browser Web Locks API (#169) so only one tab","refreshes at a time and the next presents the freshly-rotated cookie. Server","theft-detection stays strict; browsers without the API fall back to per-tab","coordination only. As the server-side safety net for the case a lock can't cover","(a tab dying between sending a refresh and receiving the rotated cookie),","reuse-detection carries a short **idempotency grace** (#176): a token rotated in","the last few seconds whose replacement is still the live tip is treated as a","benign retry — the caller gets a fresh token instead of the family being revoked.","The grace is deliberately tiny (default 10s) vs the ~15-min refresh cadence, and","**bounded to a single hop** (the link revoked by a grace-advance can't itself be","graced), so a stolen token can't be leap-frogged down the chain and a genuinely","replayed/stale token is still caught and revokes the whole family. Consuming a","token is an atomic compare-and-swap (a per-token concurrency stamp), so concurrent","replays can never fork one token into two live sessions.","**Superseded-flight cookie revocation (#393)** — a refresh (or sign-in, or","password change) that goes stale mid-flight — superseded by a newer sign-in","before its own response lands — still rotates the shared refresh cookie the","instant the browser receives that response, before the app's own bookkeeping","ever runs. The stale flight's cookie is therefore always revoked, even when","the newer sign-in already has a token in hand: which of the two responses'","cookies the browser actually kept is real network timing, not something the","app can observe or infer from \"is someone currently signed in.\" User-visible","consequence, narrow and rare: switching to a different sign-in in one browser","tab while another tab of the same browser is mid-refresh can occasionally","revoke the credential behind the *newer* sign-in too, surfacing as an","unexpected \"please sign in again\" shortly after. No work is lost — it is","exactly the same experience as any other session timeout, just sooner than","expected. See the Help page's \"Signing in\" section.","**Credential epoch (#364)** — a monotonically increasing per-user number carried","in every access token and stamped onto every refresh token. A request is valid","only when its epoch matches the current user record, so an administrative","credential reset can invalidate access tokens immediately without a per-request","revocation list. The epoch readers ship before the mutations that advance it;","deploys must drain older replicas before enabling those mutations.","**Disabled user (#356)** — an Owner-only Users-screen action that revokes a","colleague's access without deleting them. A disabled user cannot sign in,","cannot refresh an existing session, and cannot obtain or spend a **step-up","grant**; every one of their live sessions stops working on its very next","request, not once the access token's ~15-minute lifetime happens to run out —","the disable bumps the target's **credential epoch** (see above), rotates","their security stamp, and revokes every refresh token, mirroring the side","effects a role change applies. Re-enabling is reversible but deliberately","**not symmetric on the credential epoch**: it also rotates the security","stamp (so a stale concurrent password-reset write cannot silently restore","the disabled flag), but it does NOT roll the credential epoch back, so every","credential issued before the disable stays permanently dead and the user","signs back in fresh; nothing minted before the disable is ever revived. The","account's last active Owner cannot be disabled","(refused inside the same account-locked transaction that guards a demotion),","and nobody can disable themselves (refused at the endpoint before validation","even runs). This is not deletion: a disabled user's row, their audit trail,","and every record elsewhere that names them (created-by trails, refresh-token","history, orders they raised) are untouched; hard delete of a user account is","out of scope here (personal-data erasure is #272). Break-glass recovery","**refuses** a disabled target rather than resetting its password — a reset","would not restore access, because a disabled user is turned away before the","password is ever checked; re-enable them first.","**Version (concurrency token)** — every mutable aggregate carries a `Version`","that each mutation bumps. Two concurrent edits: first save wins, second gets","a 409 and retries against fresh state. Append-only aggregates (bird","movements) don't need one.","**Operational day** — dates are farm-local calendar dates, resolved from the","farm's own timezone rather than UTC (#35, #155). This is what \"today\" means for","every rule that turns on a date: whether an egg lot is still under **withdrawal","restriction** and which lots a sale may draw on; whether a daily entry, bird","movement, feed or water usage, purchase, stock correction, expense, payment or","flock placement is dated in the future; the day a flock's **deplete** or","**archive** is stamped with; and the default window and future guard on","**reports**. They all read one boundary, so a lot can never count as sellable on","one screen and restricted on another, and \"in the future\" cannot mean different","things on two screens of the same farm.","It matters most around midnight. At 18:00 on July 15 in Los Angeles it is","already July 16 in UTC, so on a UTC boundary a lot restricted through the 15th —","eggs still inside a medication withholding period — would read as available a","day early. A farm ahead of UTC has the mirror problem: its legitimate today","looks like tomorrow. Recording a genuinely future day is refused outright; there","is no longer any day-either-side slack.","The date fields agree with it (#123). Every picker that records *when something","happened* — daily entry, flock placement and bird movements, water, feed","purchase and usage, expenses, sales orders and payments, and the `to` end of a","report range — opens on the farm's today and refuses to go past it, the farm's","and not the one on the device in your hand. A phone travelling ahead of the farm","used to offer a day the save would then refuse, and a phone behind it hid a day","that was perfectly legal; both are gone.","Three date fields are deliberately *not* capped, because a future date is the","point of them: a feed lot's **expiry**, and the range filters on History and","Water. Change the farm's timezone and every capped picker follows on the next","screen that renders.","**Roles (#103, spec §5.1)** — five shipped: **Admin (owner)** does","everything including user management; **Manager** runs the farm — every","corrective, config, and money capability except managing users; **Worker**","(a user with no role) records the day's work, optionally narrowed to","**assigned flocks** (spec §5.3 — no assignments = account-wide, the first","assignment restricts); **Sales** handles customers, orders, and payments but","no production capture; **Read-only** sees stock, history, and reports only.","Vet/Consultant is deferred until a health module exists to gate, and","house-level scoping until houses are real entities. The SPA hides gated","controls; the API returns 403 with a problem body regardless. The role travels as a `role` claim in the","access token and is re-read at every token refresh.","**Users screen** — Owner-only user management (#103): create a user with","email, password, an optional **display name**, and one of the five roles, and","manage worker flock assignments (spec §5.3). A user's name can be set at","creation and later changed from the row's **edit** action (#163; blank clears","it back to \"—\"). The row's **password** action sets a new password without","knowing the current one (#165) — the forgot-password path, since there is no","email reset. The row's **role** action changes an existing user's role —","promote or demote among the five roles (#355). It **refuses self-targeting**","(ask another Owner) and refuses demoting the account's **last Owner** (a farm","cannot lock itself out of user administration). Promoting to Owner requires a","**step-up grant** (see below); every other target role is ungated. Any actual","change is audited (`User.RoleChanged`, old to new) and, like a password reset,","bumps the target's **credential epoch** and revokes their sessions — a demoted","user's already-issued access token stops working on its very next request, not","merely once its ~15-minute lifetime runs out.","**Password change (#165)** — two paths with different rules. An Owner sets any","*other* user's password from the Users screen without the current one; any","signed-in user changes their OWN from the **Account** screen by proving the","current one. The Owner path **refuses self-targeting**: skipping the","current-password proof for your own account would turn a stolen access token","into a permanent takeover, so an Owner changes their own password like everyone","else. One Owner *can* reset a co-Owner's password (all Owners are equivalent);","it is audited (`User.PasswordSet`) and, since #308, requires a **step-up","grant** because the target holds Owner (see below) — resetting any other","role's password is unchanged and stays ungated.","Both revoke every refresh token for that user, so other devices are signed out","— the self-service path hands the device that made the change a fresh pair so it","stays signed in. Since #364, both paths also bump the user's **credential","epoch** (see above) in that same transaction, and every authenticated request","is checked against it — so an already-issued access token is rejected on its","very next request, not merely bounded by the ~15-min access-token lifetime.","**Step-up authentication (#308)** — a fresh proof of identity required, on top","of a normal valid Owner access token, before five specific actions:","**creating another Owner**, **resetting an existing Owner's password**, and","**changing a user's role to Owner** (#355) — plus, since #356, **disabling**","or **re-enabling** a user, gated UNCONDITIONALLY rather than only when the","target holds Owner. The first three close one threat: a stolen-but-still-valid","Owner access token (good for ~15 min — merely holding it bumps no credential","epoch, see **Credential epoch** above) is otherwise enough on its own to mint","a second, independent Owner or take over an existing one, turning short-lived","token theft into durable account control. Disable/enable close a related one","that isn't Owner-scoped: any disable revokes real access outright, and","re-enabling an Owner would otherwise hand back exactly what a stolen token's","disable took away — so, unlike the role-change gating above, there is no","\"ordinary farm administration\" case here left ungated. Every other action on","the Users screen — creating a Worker/Manager/Sales/Read-only user, resetting","one of their passwords, editing a display name, flock assignment, changing a","role to anything OTHER than Owner — is **unchanged and ungated**; the point is","to gate exactly the operations that can multiply, hand over, or cut off","account control, not to add a blanket prompt to ordinary farm administration.","The mechanism is **current-password re-confirmation**: the Users screen shows","an inline \"your current password\" field only when the action needs it (never","a separate popup), which the SPA exchanges for a short-lived (5 minutes by","default), single-use, account-and-user-bound **step-up grant** via","`POST /auth/step-up` and attaches to the one follow-up request. The grant is a","JWT carrying a DIFFERENT audience than the normal access token, so it cannot","be used as a Bearer token anywhere else; it is invalidated by a security-stamp","change (any password change/reset for that user) and by that user logging out,","and a used or expired grant is refused. Every rejection reason (missing,","expired, replayed, wrong account, revoked) returns the identical","non-enumerating denial, so a caller cannot tell which one applies. The","entered password itself is never stored — held only in the dialog's own field","and cleared the instant it is sent. TOTP/WebAuthn step-up is a deferred","follow-up (#320); the offline `recover-admin` break-glass command (see below)","is a separate CLI verb and never touches this browser flow.","**First-run admin provisioning (#283)** — how a fresh deploy gets its first","Owner without ever shipping a repo-known credential. The default account, the","four assignable roles, and the default egg grades are **static reference","data**: they ship inside the EF migrations themselves (no runtime seeder, no","`Seed:*` config — a migrated database already has them). The first admin does","**not**: an operator runs the offline `bootstrap-admin --email

`","command once, which generates a random password, creates the Owner with it,","and writes the password to **stdout only** — never the application logger or","the OTLP pipeline. A host's stdout collector (docker logs, journald, a","platform log pipeline) may still capture it, so that output must be treated","as sensitive while the password is valid. Re-running the command against an","already-provisioned account is a safe no-op (no second Owner, no password","reprinted). Because a migrated-but-unprovisioned **default account** has **no","administrator to sign in as**, the **login screen says so**: attempting to sign in while the","default account has no Owner answers with a short notice explaining that no","**administrator** account exists yet and pointing at whoever administers the","server, instead of the usual \"invalid email or password\". For the operator this","exists to help — who holds no credentials at all yet — that generic denial","describes a problem with their typing that they do not have. It disappears","for good once the default account has an Owner. The notice deliberately publishes **no","command and no deployment detail** — a page reachable by anyone is the wrong","place to describe how the server is run, and the setup steps belong in the","README. It is reported on the **failed sign-in itself**, not by a status check","the page polls, so only someone actually attempting to sign in is told anything.","It does not **enumerate**: the condition is a property of the **default","account** and never of the address that was typed, so no attempt reveals","anything about any particular account, and once that account has an Owner the","response is byte-identical to the ordinary non-enumerating denial. It does","**disclose one fact** — that the default account has no Owner — and that scope","is exact in both directions: it can be true while ordinary non-Owner accounts","exist and are protected (the predicate is the absence of an *Owner*, and the","seeders create Workers and Managers without one), and it can be true while an","Owner exists under a *different* account, since the predicate is scoped to the","default account rather than to any Owner anywhere. Accepted deliberately: the fact is not a credential and grants no access;","on a genuinely fresh install — no users at all — it is already inferable by","anyone who can reach the form; and the alternative is leaving an operator","stranded at a form no credential of theirs can satisfy. This is a **separate mechanism** from break-glass recovery below (a pre-auth, one-shot","setup secret vs. an offline recovery for a locked-out existing account) and","from the browser step-up re-confirmation a signed-in Owner uses for sensitive","actions (#308) — three distinct credential types, audiences, and lifetimes,","never conflated.","**Must-change-password gate (#283)** — the flag (`ApplicationUser",".MustChangePassword`) that forces the printed one-time password to actually","get replaced instead of sitting valid indefinitely. Set only by","`bootstrap-admin` on the Owner it creates. While set, the access token carries","a matching claim, the SPA shows a **\"Set your password\"** screen in place of","the app (any route), and the API refuses every other endpoint with 403 except","signing out and the change-password call itself. Submitting the printed","password as the \"current\" one and a new password clears the flag — the same","`/auth/change-password` endpoint the Account screen's regular self-service","change already uses. Resetting a user's password through any other path (an","Owner's Users-screen reset, break-glass) also clears a pending flag, so a","locked-out first-run admin is never left stuck.","**Break-glass reset (#265)** — the recovery path for the one case that","**self-service password change** and **first-run admin provisioning** leave","uncovered: a **sole Owner** who has lost their password. There is no email","reset, self-service needs the current password, and an Owner cannot reset their","own account — so without this the only recourse is direct database surgery. An","operator with server access runs the offline `recover-admin` command, which","resets the password to a freshly generated temporary one, **clears any lockout**,","rotates the security stamp, and revokes every session. It is audited as","`User.BreakGlassReset` (distinct from `User.PasswordSet`, and recording the","reason + the host it ran from) so the reset is conspicuous in the audit log. The","temporary password must be changed on first login.","**UI language** — a per-user preference controlling the language the interface","renders in. Stored on `ApplicationUser.Language` as a BCP-47 primary language","subtag (e.g. `en`) in lowercase; `null` means follow the app's default. Three","packs ship today — English (`en`), Spanish/Español (`es`), and Tagalog (`tl`,","both machine-drafted, pending native-speaker review) — selectable per-user","from Account → Preferences. English is the fallback for any string a pack","hasn't translated yet: the string sweep (#182) is ongoing, so screens not yet","externalized to the catalog still render in English regardless of the chosen","language. Set via `PUT /api/v1/me/language`; read via `GET /api/v1/me`.","Independent of **farm locale**, which controls number/date/currency","formatting.","**Export (manual backup) (#95)** — admin-only downloads of the account's","data as CSV files: one file per dataset, or a **full account export** — a","single zip with every dataset plus a manifest of row counts. CSVs are","RFC 4180 (UTF-8 with BOM), dates ISO-8601, money as raw minor units with","currency columns — a copy of what's stored, never a re-formatting. Cells","that a spreadsheet would run as a formula are prefixed so they render as","text. Scheduled backups belong to Phase 1.5 (spec §17.5).","**Dialog (#131)** — the popup that adding and correcting happen in. A","**New …** button sits beside the screen's title, and each row's **edit** or","**correct** link opens the same form seeded with that row's values; a","drill-down panel's actions (record a purchase, feed usage, a stock","correction, a bird movement, a customer payment) work the same way. The list","never shifts to make room for a form, and closing — **Cancel**, Escape, or a","click outside — records nothing and discards what was typed: reopening starts","from a clean form, never a half-finished one (#314). What a dialog submits is exactly","what the old inline form submitted: same fields, same validation, same","idempotency and version guards. Screens whose whole job is capture keep their","form on the page: **Daily entry**, **Water**, recording an expense, and","adding lines to a draft order.","**Confirmation (#135)** — the dialog a one-way action asks through before it","runs. Submitting a day, confirming or cancelling an order, depleting or","archiving a flock: each states what is about to happen and waits. **Cancel**","is what the keyboard lands on, so a stray Enter never takes the action, and","Escape or a click outside means no. The ones that **undo or retire** something","— void, cancel a draft, deplete, archive — colour their button red, the only","red fill in the app. Submitting a day and confirming an order are just as","irreversible but are the ordinary path through the week, so they stay","aubergine: a red button on the most routine action would say nothing.","**Void reason (#135)** — voiding a daily entry, a payment, or a confirmed","order asks in the same dialog, plus a required **Reason**. The reason is","stored with the void and shown wherever the voided record appears, so it is","the record of why. An empty reason is refused in place and what has been","typed stays put.","**Install to home screen (#142)** — Cluckwork can be installed from the browser","onto a phone or tablet, where it gets its own icon and opens in its own window","with no browser chrome. It is the same app either way, not a separate download:","there is nothing to update from a store, and it still needs a connection to do","anything — installing does **not** make the app work offline. Offline capture is","a later, deliberate piece of work.","Installing is only offered on a **secure (https) connection**. On a plain-http","address the browser simply won't show the option; the app itself works exactly","as before.","**New version is ready (#142)** — after a deploy, an installed app notices the","new version in the background and asks before switching, rather than reloading","underneath whatever is being typed. Accepting reloads onto the new version; the","prompt reappears next time if it is dismissed. Nothing is lost by leaving it —","the running app keeps working until the switch is accepted.","web/src/i18n/en.ts",[1850],{"_923":687,"_924":1851,"_422":1852,"_927":62},3029,[1853,1854,1855,1856,1857,1858,1859,1860,1861,1862,1863,1864,1865,1866,1867,1868,1869,1870,1871,1872,1873,1874,1875,1876,1877,1878,1879,1880,1881,1882,1883,1884,1885,1886,1887,1888,1889,1890,1891,1892,1893,1894,1895,1896,1897,1898,1899,1900,1901,1902,1903,1904,1905,1906,1907,1908,1909,1910,1911,1912,1913,1914,1915,1916,1917,1918,1919,1920,1921,1922,1923,1924,1925,1926,1927,1928,1929,1930,1931,1932,1933,1934,1935,1936,1937,1938,1939,1940,1941,1942,1943,1944,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1955,1907,1956,1957,1958,1959,1960,1961,1962,1963,1964,1965,1966,1967,1968,202,1969,1970,1971,1972,1973,1974,1975,1976,1977,1978,1979,1980,1981,1982,1983,1984,1985,1986,1987,1988,1989,1990,1991,1992,1993,1994,1907,1995,1996,1997,1998,1999,1907,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,202,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,2030,2031,2032,2033,2034,2035,2036,2037,2038,2039,2040,202,2041,2042,2043,2044,2045,2046,2047,2048,2049,2050,2051,2052,2053,2054,2055,2056,2057,202,2058,2059,2060,2061,2062,1907,2063,2064,2065,2066,2067,2068,2069,2070,2071,2072,2073,2074,2075,2076,2077,1907,2078,2079,2080,2081,2082,2083,2084,2085,2086,1907,2087,2088,2089,2090,2091,2092,2093,2094,2095,2096,1907,2097,2098,2099,1907,2100,2101,2102,2103,2104,2084,2105,2106,1907,2107,2108,2109,2110,2111,1907,2112,2113,2114,2115,1892,2116,2117,202,2118,2119,2120,2121,2122,2123,2124,2125,2126,2127,2128,2129,2130,2131,2132,2133,2134,2135,2136,2137,202,2138,2139,2140,2141,2142,2143,2144,2145,2146,2147,2148,2149,2150,2151,2152,2153,2154,2155,2156,2157,2158,2159,2160,2161,202,2162,2163,2164,2165,2166,2167,2168,2169,202,2170,2171,2172,202,2173,2174,2175,2176,2177,202,2178,2179,2180,2181,2182,2183,2184,202,2185,2186,2187,2188,2189,2190,2191,202,2192,2193,2194,2195,2196,2197,2198,2199,2200,2201,202,2202,2203,2204,2205,2206,2207,2208,2209,2210,2211,2212,2213,2214,202,2215,2216,2217,2218,2219,2220,2221,2222,2223,2224,2225,2226,2227,2228,202,2229,2230,2231,2232,2233,2234,1907,2235,2236,2237,2238,2239,2240,2241,2242,202,2243,2244,2245,2246,2247,202,2248,2249,202,2250,2251,2252,2253,2254,2255,202,2256,2257,2258,2259,2260,2261,2262,202,2263,2264,2265,2266,2267,2268,2269,2270,2271,202,2272,2273,2274,2275,2276,202,2277,2278,2279,2280,2281,2282,2283,2284,202,2285,2286,2287,2288,2289,2290,202,2291,2292,2293,2294,2295,2296,2297,202,2298,2299,2300,2301,2302,2303,2304,2305,2306,202,2307,2308,2309,2310,2311,2312,2313,2314,2315,2316,2317,2318,2319,2320,2321,2322,2323,2324,202,2325,2326,2327,2328,2329,2330,202,2331,2332,2333,1907,2334,2335,2336,2337,2338,2339,2340,2341,2342,2343,2344,2345,2346,2347,202,2348,2349,2350,2351,2352,2353,202,2354,2355,2356,2357,202,2358,2359,2360,2361,2362,2363,2364,2365,2366,2367,202,2368,2369,2370,2371,2372,2373,2374,202,2375,2376,2377,2378,2379,2380,1907,2381,2382,2383,2384,2385,2386,2387,2388,2389,2390,2391,2392,2393,2394,2395,2396,202,2397,2398,2399,202,2400,2401,2402,202,2403,2251,2253,2404,2405,2406,2407,2254,2408,2409,2410,202,2411,2412,202,2202,2413,202,2331,2414,202,2415,2416,2417,2418,202,2419,2420,2421,2422,2423,2424,2425,2426,202,2427,2428,2361,2429,2430,2431,2432,2433,1907,2434,2435,202,2243,2244,2436,2437,2438,2439,202,2400,2440,2441,2442,202,2403,2251,2253,2254,2443,2444,2445,2446,2447,2448,2449,2409,2410,202,2411,2450,2451,2452,202,2202,2413,2453,202,2331,2454,2455,202,2419,2423,2424,2425,2456,202,2427,2428,2361,2430,2457,2458,2432,2459,2433,1907,2460,2461,2383,2462,2463,2464,2465,2466,2467,2468,2469,2470,2471,2472,2473,2474,2475,2476,2477,202,2348,2478,2479,202,2400,2480,2481,2482,202,2483,2484,2485,2486,2487,2488,2489,2490,2491,2492,2493,2494,202,2495,2496,2497,2498,2499,2500,2501,2502,2503,202,2504,2505,2506,2507,2508,2509,2362,202,2510,2511,2512,1907,2513,2514,2236,2515,2516,2517,2518,2519,2520,2521,2522,2523,2524,2525,2526,2527,2528,2529,2530,2531,2532,2533,2534,2535,2400,2536,2537,202,2243,2244,2538,2539,2540,2541,2413,2542,2543,2544,2545,202,2546,2547,2548,2549,2550,2551,2552,2553,2554,2555,2556,202,2557,2558,2559,2560,2561,2562,2563,2564,2565,2566,2567,2568,2569,2570,2571,2572,202,2573,2574,2575,2576,2577,2409,2578,2579,2580,2581,2582,2583,2410,2584,202,2585,2251,2586,2254,202,2587,2588,2589,2590,2591,2497,2592,2593,2594,2595,2098,2596,202,2597,2598,2599,2600,2601,2602,2603,202,2604,2506,2605,2606,2607,2362,2608,2492,2493,2494,1907,2609,2610,2611,2383,2612,2613,2614,2615,2616,2617,2618,2619,2620,2621,2622,202,2623,2624,2244,2625,2626,2204,2205,202,2400,2627,2628,2629,202,2630,2631,2632,2486,2633,2634,2635,202,2636,2637,2258,2638,2639,2640,2641,2642,2643,2644,2645,2646,2647,2648,2649,202,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2661,202,2662,2663,2664,2665,2506,2371,2666,2667,2668,2669,2362,2670,2671,2492,2493,2494,202,2672,2673,2674,2675,2676,2677,2678,2679,2680,2681,1907,2682,2683,2684,2685,2686,2687,2688,2689,2690,2691,2692,2693,2694,2695,2696,202,2697,2244,2698,2699,2700,202,2370,202,2701,2371,2702,2703,2704,2372,2373,2705,2706,2707,2708,2709,2710,2711,202,2712,2713,2714,2715,2716,2717,2718,2719,2720,2424,2425,2433,202,2721,2722,2723,2724,2725,2726,2727,2728,2599,2729,2730,202,2731,2732,2733,2734,2735,2736,2737,2738,2739,2740,2741,2742,2743,2744,2745,2746,2747,2748,2749,1907,2750,2751,2752,2753,2383,2754,2755,2517,2756,2757,2758,2759,2760,2761,2762,2763,2764,2765,2766,2767,2768,202,2769,2244,2436,2770,202,2771,2400,2772,2773,202,2256,2257,2496,2774,2260,2775,2776,2777,2261,2778,202,2779,2780,2781,2782,2783,2784,202,2785,2786,2787,202,2788,202,2789,2790,2664,2506,2791,2792,2793,2794,2362,2795,2796,2797,202,2798,2799,2800,2801,2492,2802,2803,2804,2805,2806,202,2807,2808,2809,2810,2811,2812,2813,2814,2815,2816,202,2817,2818,2819,2820,2821,2822,2823,202,2824,2825,2826,2827,2254,2497,2410,2828,202,2829,202,2830,2831,2832,2598,2599,2833,2601,1907,2834,2835,2236,2836,2837,2838,2839,2840,2841,2842,2843,2844,2845,2839,2846,2847,2848,2849,2850,2851,2852,2853,2854,2855,2400,2856,2857,2858,202,2859,2860,2861,2862,2863,2864,2865,2866,2867,2868,2869,2870,2871,2872,2873,2874,2875,2876,2877,2878,2879,2880,2881,2882,2883,2884,2885,2886,2887,2888,2889,2890,2891,2892,202,2893,2894,2895,2896,2897,2898,2899,2900,2901,2902,2903,2904,2905,2906,2907,2908,2909,2910,2911,2912,2913,202,2914,2915,2916,2917,2918,2919,2920,2921,2922,2923,2924,2925,2926,2927,2928,2929,2930,2931,2932,2933,2934,2935,2936,2937,2938,2939,2940,2941,2942,2943,2944,2945,2946,2947,2948,2949,2950,2951,2952,2953,2954,2955,2956,2957,2958,2959,2960,2961,2962,2963,2964,2965,2966,2967,202,2968,2478,2969,2970,2971,2972,2973,2974,2975,2976,2977,1907,2978,2979,2236,2836,2980,2981,2839,2982,2983,2984,2985,2986,2987,2988,2989,2990,2991,2992,2993,2994,2995,2996,2997,2998,2999,202,3000,3001,3002,3003,3004,3005,3006,3007,3008,202,3009,3010,3011,3012,3013,3014,3015,3016,3017,3018,3019,3020,202,3021,3022,3023,3024,3025,2492,3026,3027,3028,3029,3030,3031,3032,3033,3034,3035,202,3036,3037,3038,3039,3040,3041,3042,3043,3044,3045,202,3046,3047,3048,202,3049,3050,3051,3052,3053,3054,3055,1951,202,3056,3057,3058,3059,3060,3061,202,3062,3063,3064,3065,3066,3067,3068,3069,3070,3071,3072,3073,3074,3075,3076,3077,202,2968,3078,3079,3080,3081,3082,3083,3084,3085,3086,3087,1907,3088,3089,3090,2236,2836,3091,2091,2839,3092,3093,3094,3095,3096,3097,3098,3099,3100,3101,2839,3102,3103,3104,3105,3106,3107,3108,202,2968,2478,3109,3110,3111,3112,3113,3114,3115,3116,3117,3118,3119,202,3120,3121,3122,2203,2204,2205,2206,202,3123,3124,3125,3126,2552,3127,3128,3129,3130,3131,3132,202,3133,3134,3135,3136,3137,3138,3139,3140,3141,2493,2804,3142,202,3143,3144,3145,3146,3147,3148,3149,3150,3151,3152,3153,3154,3155,202,3156,3157,3158,3159,2451,202,3160,3161,2428,2605,3162,2430,2361,2432,2459,2433,1907,3163,3164,3165,2383,3166,3167,3168,2839,3169,3170,3171,3172,3173,3174,3175,3176,3177,3178,3179,202,3180,3181,3182,3183,3184,3185,3186,202,3187,2244,3188,3189,202,3190,3191,2506,3192,3193,3194,2432,3195,1907,3196,3197,3198,2236,2836,3199,3200,2839,3201,3202,3203,3204,3205,3206,3207,3208,3209,3210,3211,2839,3212,3213,3214,3215,3216,2839,3217,3218,3219,3220,3221,3222,3223,3224,3225,3226,3227,3228,3229,3230,3231,202,2400,3232,3233,3234,202,2243,3235,3236,3237,3238,3239,3240,3241,3242,3243,3244,3113,3245,3246,3247,3248,3249,3250,3251,3252,3253,3254,3255,3256,3257,3258,3259,3260,3261,3262,3263,3264,3265,3266,3267,3268,3269,3270,3271,3272,3273,3274,3275,202,3123,2251,3276,2424,2425,202,3277,3278,3279,3280,3281,3282,3283,3284,3285,3286,3287,3288,3289,3290,3291,3292,3293,3294,2098,3295,202,3296,202,3297,2428,2361,2362,2380,3298,3299,3300,3301,3302,2365,3303,3304,3305,2492,3306,3307,2433,202,3308,3309,3310,3311,3312,3313,3314,3315,3316,1907,3317,3318,3319,3320,3321,2839,3322,3323,3324,3325,3326,3327,3328,3329,3330,3331,3332,3333,3334,2424,2425,202,3335,2428,2363,3298,3336,3337,3338,3339,3340,3341,3302,3342,3343,3344,3345,3346,202,3347,3348,3349,3350,3351,3352,3353,3354,3355,3356,3357,3358,3359,3360,3361,3362,3363,3364,3365,3366,3367,3368,3369,1907,3370,3371,3372,3373,3374,3375,3376,3377,3378,3379,3380,3381,2400,3382,3383,3384,3385,3386,3387,3388,3389,3390,3391,3392,3393,3394,3395,3396,3397,3398,3399,3400,3401,3402,3403,3404,3405,2433,1907,3406,3407,3408,3409,3410,3411,3412,3413,3414,3415,3416,3417,2400,3418,3419,3420,202,3421,3422,3423,3424,3425,3426,3427,202,3428,202,3429,3430,3431,3432,3433,3434,3435,3436,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,3447,3448,3449,3450,3451,3452,3453,3454,3455,3456,3457,1907,3458,3459,3460,3461,3462,3463,3464,2839,3465,3466,3467,3468,3469,3470,3471,3472,3473,3474,3475,3476,3477,3478,3479,3480,3481,3482,3483,3484,3485,3486,3487,3488,3489,3490,3491,3492,3493,3494,3495,3496,3497,202,3498,3499,3500,3501,3502,3503,3504,3505,3506,202,3507,3508,3509,3510,3511,202,3512,3513,3514,3515,202,3516,3517,3518,3519,202,3520,3521,3522,3523,3524,3525,3526,3527,3528,3529,3530,3531,202,3532,3533,3534,3535,3536,3537,3538,202,3539,3540,3541,3542,3543,3544,202,3545,3546,3547,3548,3549,3550,3551,3552,3553,3554,202,3555,3556,3557,202,3558,3559,3560,3561,3562,3563,3564,3565,202,3566,3567,3568,3569,3570,3571,3572,3573,3574,3575,3576,3577,3578,3579,3580,3581,3582,3583,3584,3585,3586,3587,3588,3589,3590,3591,3592,3593,3594,3595,3596,3597,3598,3599,3600,3601,3602,3603,3604,3605,3606,3607,3608,3609,3610,3611,3612,3613,3614,3615,3616,3617,3618,3619,3620,202,3621,3622,3623,3624,3625,3626,3627,3628,3629,3630,3631,3632,3633,3634,3635,3636,1907,202,3637,3638,3639,3640,3641,3642,3643,3644,3645,3646,3647,3648,3649,202,3650,3651,3652,3653,3654,3655,3656,3657,3658,3659,3660,3661,3662,3663,3664,3665,3666,3667,3668,3669,3670,3671,3672,3673,3674,3675,3676,3677,3678,3679,202,3680,3681,3682,3683,3684,3685,3686,3687,3688,3689,3690,3691,3692,3693,3694,3695,3696,3697,3698,202,3699,3700,3701,3702,3703,3704,3705,3706,3707,3708,3709,3710,3711,3712,3713,3714,3715,3716,3717,3718,3719,3720,3721,3722,3723,3724,3725,3726,3727,3728,3729,3730,3731,3732,3733,3734,3735,3736,3737,3738,3739,3740,3741,3742,3743,3744,3745,3746,3747,3748,3749,3750,3751,3752,3753,3754,202,3755,3756,3757,3758,3759,3760,3761,3762,3763,202,3764,3765,3766,3767,3768,3769,3770,3771,3772,3773,3774,3775,3776,3777,3778,3779,3780,3781,3782,3783,3784,3785,3786,3787,3788,3789,3790,3791,3792,3793,3794,3795,3796,3797,3798,3799,3800,3801,3802,3803,3804,202,3805,3806,3807,3808,3809,3810,3811,3812,3813,3814,3815,3816,3817,3818,3819,3820,3821,3822,3823,3824,3825,3826,3827,3828,3829,3830,3831,3832,3833,3834,3835,3836,3837,3838,3839,3840,3841,3842,3843,3844,3845,3846,202,3847,3848,3849,3850,3851,3852,3853,3854,3855,3856,3857,3858,3859,3860,3861,3862,3863,3864,3865,3866,3867,3868,3869,3870,3871,3872,3873,3874,3875,3876,3877,3878,3879,3880,3881,3882,3883,3884,3885,3886,3887,3888,3889,3890,3891,3892,3893,3894,3895,202,3896,3897,3898,3899,3900,3901,3902,3903,3904,3905,3906,3907,3908,3909,202,3910,3911,3912,3913,3914,3915,3916,3917,3918,3919,3920,3921,202,3922,3923,3924,3925,3926,3927,3928,3929,3930,202,3931,3932,3933,3934,3935,3936,3937,3938,3939,3940,3941,3942,3943,3944,3945,3946,3947,3948,3949,202,3950,3951,3952,3953,3954,3955,3956,3957,3958,3959,3960,3961,3962,3963,3964,3965,3966,3967,3968,202,3969,3970,3971,3972,3973,3974,3975,3976,3977,3978,3979,3980,3981,3982,3983,3984,202,3985,3986,3987,3988,3989,3990,3991,3992,3993,3994,3995,3996,202,3997,3998,3999,4000,4001,4002,4003,4004,4005,4006,4007,4008,4009,4010,4011,4012,4013,4014,4015,4016,4017,4018,4019,4020,4021,202,4022,4023,4024,4025,4026,4027,4028,4029,4030,4031,4032,4033,4034,4035,4036,4037,4038,4039,4040,4041,4042,4043,4044,4045,4046,4047,202,4048,4049,4050,4051,4052,4053,4054,4055,4056,4057,4058,4059,4060,202,4061,4062,4063,4064,4065,4066,4067,4068,4069,4070,4071,4072,4073,4074,202,4075,4076,4077,4078,4079,4080,4081,4082,4083,4084,4085,4086,4087,4088,4089,4090,4091,4092,4093,4094,4095,4096,4097,4098,4099,4100,4101,4102,4103,4104,4105,4106,4107,4108,4109,4110,4111,4112,4113,202,4114,4115,4116,4117,4118,4119,4120,4121,4122,4123,202,4124,4125,4126,4127,4128,4129,4130,4131,4132,4133,4134,4135,4136,4137,4138,4139,4140,4141,4142,4143,4144,4145,4146,4147,4148,4149,4150,4151,4152,4153,4154,4155,4156,4157,4158,4159,4160,4161,4162,4163,4164,4165,4166,4167,4168,4169,4170,4171,4172,4173,4174,202,4175,4176,4177,4178,4179,4180,4181,4182,4183,4184,202,4185,4186,4187,4188,4189,4190,4191,4192,4193,4194,4195,4196,202,4197,4198,4199,4200,4201,4202,4203,4204,4205,4206,4207,4208,4209,4210,4211,4212,4213,4214,4215,4216,4217,4218,4219,4220,202,4221,4222,4223,4224,4225,4226,4227,4228,202,4229,4230,202,4231,4232,202,4233,4234,4235,4236,202,4237,4238,4239,4240,202,4241,4242,4243,4244,4245,202,4246,4247,4248,4249,4250,202,4251,4252,4253,4254,202,4255,4256,4257,4258,4259,4260,4261,202,4262,4263,4264,4265,4266,4267,202,4268,4269,4270,4271,4272,4273,202,4274,4275,4276,4277,4278,4279,4280,4281,4282,4283,4284,4285,4286,202,4287,4288,4289,4290,202,4291,4292,4293,4294,4295,4296,4297,4298,202,4299,4300,4301,4302,4303,4304,202,4305,4306,4307,4308,4309,4310,202,4311,4312,4313,4314,4315,202,4316,4317,4318,4319,4320,4321,4322,4323,202,4324,4325,4326,4327,4328,4329,4330,4331,4332,4333,4334,4335,4336,4337,4338,202,4339,4340,4341,4342,4343,202,4344,4345,202,4346,4347,4348,4349,202,4350,4351,202,4352,4353,4354,4355,202,4356,4357,4358,4359,4360,4361,4362,202,4363,4364,202,4365,4366,202,4367,4368,202,4369,4370,202,4371,4372,4373,4374,202,4375,4376,4377,4378,202,4379,4380,4381,2678,4382,4383,4384,4385,4386,202,4387,4388,4389,4390,202,4391,4392,202,4393,4394,4395,202,4396,4397,202,4398,4399,4400,202,4401,4402,202,4403,4404,4405,202,4406,4407,4408,202,4409,4410,202,4411,4412,4413,202,4414,4415,4416,4417,202,4418,4419,4420,202,4421,4422,4423,4424,4425,202,4426,4427,4428,4429,202,4430,4431,4432,4433,4434,4435,202,4436,4437,4438,4439,4440,202,4441,4442,4443,4444,4445,4446,202,4447,4448,4449,4450,4451,4452,202,4453,4454,4455,4456,202,4457,4458,4459,4460,4461,202,4462,4463,4464,4465,4466,4467,4468,202,4469,4470,1907,4471,202,4472],"// The English catalog — the SOURCE OF TRUTH and the fallback (#182). Namespaced","// by area. Keys are camelCase; values are sentence-case UI copy. Adding a key","// here extends the compile-time key type (see types/i18next.d.ts), so a t(\"typo\")","// is a build error.","export const en = {"," common: {"," // #494 — the record-history cell shown on the list screens. \"Last changed\""," // appears only when something happened after creation."," \"recordHistory.createdBy\": \"Created by {{email}} on {{at}}\","," \"recordHistory.lastChangedBy\": \"Last changed by {{email}} on {{at}}\","," // #494 — when the record became official. Shown even when the person who"," // submitted or confirmed it is the same person who created it, because that"," // case is excluded from \"last changed by\" and the instant would be lost."," \"recordHistory.submittedAt\": \"Submitted {{at}}\","," \"recordHistory.confirmedAt\": \"Confirmed {{at}}\","," // #493 — the per-row link to this record's full audit trail (AuditPage,"," // entity-scoped). Deliberately not \"History\": StockPage already has a"," // \"History\" toggle for the inventory movement ledger on the same row, a"," // different trail, and the two must not read as the same affordance."," \"recordHistory.viewHistoryLink\": \"Audit history\","," // #493 review (codex) — Egg lots specifically: the ONLY audit action"," // ever written against an EggLot's own entityId is a manual write-off"," // or recount (RecordEggLotMovementHandler). Creation is recorded"," // against the Daily Entry that produced the lot, allocation/restoration"," // against the Sales Order — never against the lot itself. \"Audit"," // history\" on this one screen would promise a full lifecycle the data"," // can't deliver: a normal, never-adjusted lot shows nothing at all."," // Distinct, honest label for StockPage only; the other five screens"," // (which DO have a Create event against themselves, #494) keep the"," // shared \"Audit history\" label above."," \"recordHistory.viewAdjustmentHistoryLink\": \"Adjustment history\","," recordHistoryHeader: \"History\","," cancel: \"Cancel\","," save: \"Save\","," close: \"Close\","," delete: \"Delete\","," edit: \"Edit\","," add: \"Add\","," confirm: \"Confirm\","," loading: \"Loading…\","," working: \"Working…\","," // The Help page's one line on busy buttons (#236) — kept beside `working`,"," // the announcement it explains."," workingHint:"," \"A spinning button means the save is still working — pressing it again will not record the same thing twice.\","," retry: \"retry\","," required: \"Required\","," optional: \"Optional\","," actions: \"Actions\","," search: \"Search\","," all: \"All\","," none: \"None\","," yes: \"Yes\","," no: \"No\","," },"," auth: {"," title: \"Cluckwork\","," email: \"Email\","," password: \"Password\","," signIn: \"Sign in\","," signingIn: \"Signing in…\","," invalidCredentials: \"Invalid email or password.\","," credentialsSuperseded: \"Your credentials changed. Please sign in again.\","," accountDisabled: \"Your account has been disabled.\","," tooManyAttempts:"," \"Too many sign-in attempts. Please wait a few minutes and try again.\","," apiDown: \"Could not sign in. Is the API running?\","," // #309 — the request body exceeded the server's byte cap (413), which in"," // practice means an implausibly long email/password."," credentialsTooLong: \"That's too long — check your email and password.\","," // #283 follow-up — shown on the login form when a FAILED sign-in reports"," // that the default account still has no Owner. Base data ships in the"," // migrations but no credential ever does, so a fresh install has nobody for"," // the operator to sign in as. Deliberately names no command — see the"," // comment in Login.tsx."," // Says ADMINISTRATOR, never \"no accounts\" (PR #363 review): the condition"," // is specifically that the DEFAULT ACCOUNT has no Owner, and a non-Owner"," // user can exist without one and sign in perfectly well — so the broader"," // claim would be false in a reachable state."," noAdminYet:"," \"No administrator yet. This farm hasn't finished first-time setup, so \""," + \"there's no administrator account to sign in with.\","," // No command here on purpose — see the comment in Login.tsx. Whoever set the"," // server up runs a one-time setup step; the README carries the exact steps."," noAdminYetHint:"," \"Ask whoever set up this server to create the first administrator. The \""," + \"setup steps are in the project README.\","," // #283 — the first-run \"set your password\" screen (SetPasswordPage),"," // shown instead of the app shell whenever the signed-in user's token"," // carries must_change_password. Reuses /auth/change-password: the"," // operator already knows the generated temporary password."," setPasswordHeading: \"Set your password\","," setPasswordHint:"," \"This is your first sign-in. Set a new password to continue — the \""," + \"temporary one won't work again after this.\","," temporaryPasswordLabel: \"Temporary password\","," setPasswordNewLabel: \"New password (min {{min}} chars)\","," setPasswordConfirmLabel: \"Confirm new password\","," setPasswordButton: \"Set password\","," setPasswordSubmitting: \"Setting password…\","," setPasswordSignOut: \"Sign out\","," setPasswordMismatchError: \"The new passwords don't match.\","," setPasswordTooShortError: \"The new password must be at least {{min}} characters.\","," account: {"," preferences: \"Preferences\","," language: \"Language\","," languageHint: \"The language the interface is shown in, just for you.\","," // #444 — the pack unit YOUR Daily Entry steppers bump by. {{unit}} in the"," // farm-default option is the raw EggUnit code (DATA, e.g. \"Tray\"), matching"," // how the Products screen renders unit codes."," stepperUnit: \"Daily Entry counting unit\","," stepperUnitHint:"," \"How much the Daily Entry +/− buttons count by, just for you — pick a pack \""," + \"unit like Tray to count by the tray instead of the egg, or follow the farm default.\","," stepperUnitFarmDefaultOption: \"Farm default ({{unit}})\","," stepperUnitSaveFailed: \"Could not save — your counting unit was not changed.\","," // Task 25 (#182, B4) — the rest of AccountPage: the page heading, the"," // role line, and the self-service change-password surface (#165)."," heading: \"Account\","," // {{role}} is the signed-in account's own role, passed through"," // enums.ts's roleLabel() by the component (Task 22 convention: role"," // display always goes through roleLabel(), e.g. \"ReadOnly\" ->"," // \"Read-only\") — so this stays a plain string placeholder here, not raw"," // union data. is the only JSX interleaved in this screen's"," // prose, hence the one use."," roleLine: \"You are signed in with the {{role}} role.\","," changePasswordHeading: \"Change password\","," changePasswordHint:"," \"Changing your password signs you out everywhere else — this device \""," + \"stays signed in.\","," // The trailing \" *\" is folded into the label text itself, matching how"," // UsersPage's emailFieldLabel/newPasswordFieldLabel already handle a"," // required-field marker — never a standalone \"*\" key."," currentPasswordLabel: \"Current password *\","," // {{min}} is MIN_LENGTH (AccountPage.tsx) — interpolated, not baked in,"," // so the label and the validation message below can never drift apart."," newPasswordLabel: \"New password (min {{min}} chars) *\","," confirmPasswordLabel: \"Confirm new password *\","," changePasswordButton: \"Change password\","," passwordMismatchError: \"The new passwords don't match.\","," passwordTooShortError: \"The new password must be at least {{min}} characters.\","," passwordChangedMessage: \"Password changed. Any other devices have been signed out.\","," // Keyed by the API's stable validation codes (#45), which contain dots"," // (e.g. \"Me.Language.Format\"). With keySeparator:false (see init) these are"," // literal flat keys, not nested paths. Filled in Task 4."," errors: {"," \"Me.Language.Format\": \"Language must be a 2–8 letter code, for example 'en'.\","," // Shared navigation chrome (Task 7, #182) — the FIRST screen-externalization"," // batch (B1). `nav` is in TRANSLATED_NAMESPACES — es/tl are machine-drafted"," // (#182), pending native review. `navGroups()`/`tabEntries()`"," // (routes/nav.tsx) are PURE FUNCTIONS and cannot call useTranslation, so they"," // carry a typed `labelKey` into this namespace instead of English text; the"," // render sites (AppLayout, BottomNav) translate it. The same labelKeys feed"," // the sidebar, the bottom tab bar, and the More sheet — one source."," nav: {"," // Section headings (NavGroup.labelKey)."," groupOverview: \"Overview\","," groupProduction: \"Production\","," groupSalesStock: \"Sales & stock\","," groupInsights: \"Insights\","," groupSetup: \"Setup\","," groupYou: \"You\","," groupHelp: \"Help\","," // Destination labels (NavEntry.labelKey)."," dashboard: \"Dashboard\","," dailyEntry: \"Daily entry\","," flocks: \"Flocks\","," feed: \"Feed\","," water: \"Water\","," inventory: \"Inventory\","," stock: \"Stock\","," customers: \"Customers\","," sales: \"Sales\","," history: \"History\","," reports: \"Reports\","," expenses: \"Expenses\","," farmSettings: \"Farm settings\","," grades: \"Grades\","," products: \"Products\","," users: \"Users\","," audit: \"Audit\","," export: \"Export\","," account: \"Account\","," // Distinct from `groupHelp` above: this is the \"Help\" DESTINATION's own"," // labelKey, just like every other entry pairs with its group's `group*`"," // heading key (e.g. `groupSetup`/farmSettings). The rendered text happens"," // to coincide with the group heading, but the two keys are independent."," help: \"Help\","," // AppLayout chrome."," skipToContent: \"Skip to main content\","," primaryNavAriaLabel: \"Primary\","," signOut: \"Sign out\","," // {{version}} is a bare semver string (e.g. \"0.0.2\"), never itself"," // translated — only the surrounding \"v\" template varies by locale in"," // principle, though every catalog currently agrees on it (#458)."," versionLabel: \"v{{version}}\","," farmLoadFailedNeverLoaded:"," \"Could not load this farm's settings, so dates follow this device rather than the farm.\","," farmLoadFailedStale:"," \"Could not re-read this farm's settings, so what you see here may be out of date.\","," tryAgain: \"Try again\","," // Composed with the per-page title (the active nav entry's translated"," // label) to build document.title, e.g. \"Dashboard — Cluckwork\". The brand"," // word stays as-is, matching FarmBrand's own hardcoded \"Cluckwork\" fallback."," titleSuffix: \" — Cluckwork\","," // BottomNav chrome."," tabBarAriaLabel: \"Sections\","," moreButton: \"More\","," menuTitle: \"Menu\","," allSectionsAriaLabel: \"All sections\","," // Shared primitives (Task 8, #182, batch B1) — Dialog's close button reuses"," // `common.close` (no new key needed); these two components have genuinely"," // new copy of their own. Both namespaces are in TRANSLATED_NAMESPACES — es/tl"," // are machine-drafted (#182), pending native review, same treatment as"," // `nav` above."," numberField: {"," // Interpolated with the caller-supplied field name (e.g. \"total eggs\"),"," // which is domain text passed in via NumberField's `label` prop, not"," // translated here."," increaseLabel: \"Increase {{label}}\","," decreaseLabel: \"Decrease {{label}}\","," // #444 — used instead of the plain pair when the stepper counts by a pack"," // unit, so the announced name carries the amount the visible \"+30\" shows."," increaseByLabel: \"Increase {{label}} by {{step}}\","," decreaseByLabel: \"Decrease {{label}} by {{step}}\","," errorBoundary: {"," title: \"Something went wrong\","," screenBody:"," \"This screen ran into a problem and couldn’t finish loading. Anything you’d already saved is safe, but anything you were still typing here may need to be entered again. The rest of the app still works.\","," appBody:"," \"The app ran into a problem and couldn’t finish loading. Reloading usually clears it.\","," reload: \"Reload\","," backToDashboard: \"Back to the dashboard\","," detailsSummary: \"Error details\","," // The last three shared components (Task 9, #182, batch B1). Cancel reuses"," // common.cancel (see useConfirm below) rather than duplicating it here."," // Both namespaces are in TRANSLATED_NAMESPACES, same treatment as"," // `nav`/`numberField`/`errorBoundary` above: es/tl are machine-drafted"," // (#182), pending native review."," themeToggle: {"," switchToLightMode: \"Switch to light mode\","," switchToNightMode: \"Switch to night mode\","," light: \"Light\","," night: \"Night\","," useConfirm: {"," reasonLabel: \"Reason *\","," reasonRequired: \"A reason is required.\","," // The service-worker \"update ready\" banner (UpdatePrompt.tsx, src/pwa) — named"," // for the directory rather than the component, since it's the one place PWA"," // chrome lives today."," pwa: {"," updateAvailable: \"A new version of Cluckwork is ready.\","," reloading: \"Reloading…\","," later: \"Later\","," // The post-login splash (#179) — shown once per sign-in when the farm has a"," // banner set, before the authenticated shell."," splash: {"," continue: \"Continue\","," bannerAlt: \"{{farmName}} banner\","," // Sales pilot (Task 7, #182) — the worked pattern for the full sweep."," sales: {"," // Headings"," title: \"Sales\","," payments: \"Payments\","," ordersHeading: \"Orders\","," // Buttons"," newOrder: \"New order\","," newDraftOrder: \"New draft order\","," save: \"save\","," cancelEdit: \"cancel\","," edit: \"edit\","," remove: \"remove\","," addLine: \"Add line\","," confirmOrderButton: \"Confirm order (allocates stock)\","," cancelDraft: \"Cancel draft\","," // Intentional screen-specific lowercase variant, distinct from"," // common.close (\"Close\") — matches this page's lowercase link-styled"," // buttons (edit/remove/open/load more, above/below). Not a dup: same"," // meaning, different case, so it stays here rather than merging (#182)."," close: \"close\","," voidPaymentButton: \"void\","," recordPayment: \"Record payment\","," voidOrderButton: \"Void order (returns stock)\","," open: \"open\","," loadMore: \"load more\","," // Form labels"," customer: \"Customer\","," date: \"Date\","," product: \"Product\","," perLabel: \"Per\","," quantity: \"Quantity\","," // #445 — the add-line quantity is a count of SELLING UNITS, not eggs, and"," // users were typing the egg total (60 eggs → 60 trays sold). Three"," // reinforcing surfaces: the unit in the quantity label, a live \"= N eggs\""," // preview while typing, and the unit size on the product option itself."," quantityWithUnit: \"Quantity ({{unit}})\","," // A packed unit CAN legitimately be defined as 1 egg/unit (only"," // Individual is pinned server-side), so the singular forms are reachable:"," // i18next routes count 1 to _one and falls back to the base otherwise."," equalsEggs: \"= {{count}} eggs\","," equalsEggs_one: \"= {{count}} egg\","," productOptionWithUnit: \"{{name}} ({{count}} eggs/{{unit}})\","," productOptionWithUnit_one: \"{{name}} ({{count}} egg/{{unit}})\","," unitPriceWithCurrency: \"Unit price ({{code}})\","," method: \"Method\","," referenceOptional: \"Reference (optional)\","," noteOptional: \"Note (optional)\","," amountWithCurrency: \"Amount ({{code}})\","," status: \"Status\","," // Table headers (shared across the items / payments / orders tables)"," qty: \"Qty\","," eggs: \"Eggs\","," unitPrice: \"Unit price\","," lineTotal: \"Line total\","," reference: \"Reference\","," amount: \"Amount\","," total: \"Total\","," // aria-labels"," editQuantityAriaLabel: \"Edit quantity\","," editUnitPriceAriaLabel: \"Edit unit price\","," // Status-filter options. The Draft/Confirmed/Cancelled/Voided labels are"," // rendered from the shared `enums:status` family via statusLabel() (#182) —"," // no local duplicate here. `allOption` is filter-only chrome (\"no status"," // filter\"), which has no enums equivalent, so it stays in this namespace."," allOption: \"All\","," // Unit picker (the sale unit, e.g. \"3 Dozen\") — text equals the enum value."," unitEgg: \"Egg\","," unitDozen: \"Dozen\","," unitFlat: \"Flat\","," unitTray: \"Tray\","," unitCarton: \"Carton\","," unitCase: \"Case\","," // Payment-method picker — text equals the enum value."," methodCash: \"Cash\","," methodCheck: \"Check\","," methodCard: \"Card\","," methodBankTransfer: \"BankTransfer\","," methodMobilePayment: \"MobilePayment\","," methodOther: \"Other\","," // Misc UI text"," addCustomerFirst: \"Add a customer first (Customers page), then create an order.\","," noOrdersMatch: \"No orders match.\","," voidingNeedsAdmin: \"Voiding needs an admin.\","," voidReasonLabel: \"Void reason: {{reason}}\","," orderTotal: \"Total: {{amount}}\","," perUnit: \"per {{unit}}\","," eggsCount: \"({{count}} eggs)\","," // Interleaves JSX ( around \"outstanding …\") — rendered via ."," paymentsSummary: \"Paid {{paid}} — outstanding {{outstanding}}\","," // Inline validation messages"," enterValidAmount: \"Enter a valid amount.\","," noDecimalPlaces: \"This currency has no decimal places.\","," atMostDecimals: \"At most {{count}} decimal places for this currency.\","," enterAmountGreaterThanZero: \"Enter an amount greater than zero.\","," invalidUnitPrice: \"Invalid unit price.\","," // #398 — sales quantities are whole selling units; the add-line and"," // edit-line quantity controls reject a fractional value before sending,"," // rather than letting the server's JSON binding fail."," quantityMustBeWholeNumber: \"Quantity must be a whole number.\","," loadSalesDataFailed: \"Could not load sales data. Is the API up?\","," loadOrdersFailed: \"Could not load orders.\","," loadPaymentsFailed: \"Could not load this order's payments.\","," // Confirm / askReason dialogs (title / body / confirmLabel)"," confirmOrderTitle: \"Confirm this order?\","," confirmOrderBody:"," \"Stock is allocated from inventory, oldest lots first (FIFO). \" +"," \"A mistaken confirm can be undone with Void, which returns the stock.\","," confirmOrderConfirmLabel: \"Confirm order\","," cancelDraftTitle: \"Cancel this draft?\","," cancelDraftBody: \"The order becomes cancelled and can no longer be edited or confirmed.\","," voidPaymentTitle: \"Void this payment?\","," voidPaymentBody: \"The order's outstanding amount grows back by the payment's value.\","," voidPaymentConfirmLabel: \"Void payment\","," voidOrderTitle: \"Void this confirmed order?\","," voidOrderBody: \"The allocated stock returns to the exact egg lots it came from.\","," voidOrderConfirmLabel: \"Void order\","," // Templated success messages"," orderConfirmed: \"Order {{ref}} confirmed — stock allocated (FIFO).\","," draftOrderCancelled: \"Draft order cancelled.\","," paymentRecorded: \"Payment recorded.\","," paymentVoided: \"Payment voided — the outstanding amount grew back.\","," orderVoided: \"Order {{ref}} voided — stock returned to inventory.\","," // Daily entry capture screen (Task 11, #182, batch B2). `dailyEntry` is in"," // TRANSLATED_NAMESPACES, same treatment as nav/numberField/errorBoundary/"," // themeToggle/useConfirm/pwa above: es/tl are machine-drafted (#182),"," // pending native review. The one closed-vocabulary display on this screen"," // (the entry-locked banner's status word) goes through the `enums`"," // `statusLabel` helper, not a key here — see DailyEntryPage.tsx."," dailyEntry: {"," title: \"Daily entry\","," // Imperative messages (event handlers / promise callbacks — see"," // CONTRIBUTING-i18n.md's imperative i18n.t() pattern)."," loadFlocksGradesFailed: \"Could not load flocks/grades. Is the API up?\","," deepLinkUnavailable:"," \"This edit link points at a flock or date that is no longer available — using the usual defaults instead.\","," // \"Editing draft\" badge — a bespoke StatusBadge label, not an enum display."," editingDraftBadge: \"Editing draft\","," // Flock + date context row"," flockLabel: \"Flock\","," noFlocksYetOption: \"— no flocks yet —\","," depletedFlockSuffix: \" — depleted, backfill only\","," dateLabel: \"Date\","," newFlockButton: \"+ new flock\","," // New-flock dialog (F131)"," newFlockDialogTitle: \"New flock\","," nameLabel: \"Name\","," breedLabel: \"Breed\","," placedLabel: \"Placed\","," birdsLabel: \"Birds\","," createFlockButton: \"Create flock\","," // Locked-day / prefill-failure banners. `status` is interpolated with the"," // ALREADY-LABELLED (statusLabel), lowercased value — never the raw wire"," // status."," entryLockedBanner:"," \"This day is already {{status}} — its egg lots exist. \""," + \"Corrections are made from History (admins: adjust or void).\","," prefillFailedBanner:"," \"Could not check whether this day already has an entry — saving is \""," + \"blocked so existing data isn't overwritten.\","," // Step headings (F134's two-step layout)"," stepLabel: \"Step {{n}}\","," stepOfTotal: \"of 2:\","," eggCountsHeading: \"Egg counts\","," gradingHeading: \"Grading\","," // Count field labels — reused lowercased (see g.name.toLowerCase() for"," // grades, same pattern) as NumberField's aria-label `label` prop, so there"," // is no separate lowercase key to keep in sync."," totalEggsLabel: \"Total eggs\","," crackedLabel: \"Cracked\","," dirtyLabel: \"Dirty\","," discardedLabel: \"Discarded\","," mortalityLabel: \"Mortality\","," // Reconciliation readouts (counts pane)"," countsExceedTotalMessage:"," \"Cracked + dirty + discarded ({{losses}}) exceed total eggs ({{total}}).\","," sellableLabel: \"Sellable\","," sellableFormula: \"{{total}} − {{cracked}} − {{dirty}} − {{discarded}}\","," deactivatedGradeSuffix: \" (deactivated)\","," // F134 remainder-assignment gesture (grading pane)"," takeRemainderAriaLabel: \"Put all {{count}} remaining in {{grade}}\","," takeRemainderButton: \"+{{count}}\","," armAriaLabel: \"Choose a grade for the remaining {{count}}\","," disarmAriaLabel: \"Cancel choosing a grade\","," armButton: \"put all in…\","," disarmButton: \"pick a grade…\","," // The `grading` derived object's copy (chip + pinned footer)"," fixCountsFirst: \"Fix the counts first\","," fixCountsShort: \"fix the counts\","," overSellableCount: \"over the sellable count\","," overShort: \"over\","," gradedDayAddsUp: \"graded — the day adds up\","," allGradedShort: \"all graded\","," leftToGrade: \"left to grade\","," leftShort: \"left\","," // Pinned footer (phone-only summary + saves)"," countsExceedFooterMessage: \"Losses exceed the total — fix the counts\","," // #444 — shown only when a pack unit is in force. {{unit}} is the raw"," // EggUnit code (DATA, e.g. \"Tray\"), same as everywhere unit codes render."," // #446 — the day-support strip; count routes through i18next plurals."," daySupportFeed: \"Feed: {{count}} records (est. {{cost}})\","," daySupportFeed_one: \"Feed: {{count}} record (est. {{cost}})\","," // Cost dropped when the day's rows span currencies — never a blended sum."," daySupportFeedNoCost: \"Feed: {{count}} records\","," daySupportFeedNoCost_one: \"Feed: {{count}} record\","," daySupportFeedNone: \"Feed: 0 records\","," daySupportWater: \"Water: {{count}} records\","," daySupportWater_one: \"Water: {{count}} record\","," daySupportWaterNone: \"Water: 0 records\","," stepperUnitCaption: \"Counting by {{unit}} — each tap of − / + moves {{count}} eggs. Typing still enters exact numbers.\","," sellableWord: \"sellable\","," saveDraftButton: \"Save draft\","," submitButton: \"Save & submit (creates egg lots)\","," // Submit confirmation dialog (one-way action, #59)"," confirmSubmitTitle: \"Submit this day?\","," confirmSubmitBody:"," \"Egg lots are created and the entry can no longer be edited. \""," + \"Corrections after this need a manager adjustment.\","," confirmSubmitLabel: \"Submit day\","," // Save-result messages"," submittedMessage: \"Submitted — {{count}} egg lot(s) created.\","," draftSavedMessage: \"Draft saved.\","," // Landing page — today's per-flock production, stock by grade, and recent"," // sales (Task 12, #182, batch B2). `dashboard` is in TRANSLATED_NAMESPACES,"," // same treatment as nav/numberField/errorBoundary/themeToggle/useConfirm/"," // pwa/dailyEntry above: es/tl are machine-drafted (#182), pending native"," // review. The two status pills on this screen (today's per-flock entry"," // status, and each recent order's status) go through the `enums`"," // `statusLabel` helper, not a key here — see Dashboard.tsx. Wiring the"," // per-flock entry pill is an INTENTIONAL harmonization, not"," // text-preserving: a ManagerAdjusted entry"," // used to render raw (\"ManagerAdjusted\") and now reads \"Adjusted\", matching"," // HistoryPage's own bespoke badge for the same state (see the `enums`"," // header comment below)."," dashboard: {"," title: \"Dashboard\","," // Imperative message (promise callback — see CONTRIBUTING-i18n.md's"," // imperative i18n.t() pattern): every parallel fetch failed."," loadFailed: \"Could not load dashboard. Is the API up?\","," // Shared across all three panels — each degrades independently on its own"," // failed fetch."," panelLoadError: \"Could not load.\","," // Stat row"," statEggsCollectedToday: \"Eggs collected today\","," statEggsAvailable: \"Eggs available\","," statActiveFlocks: \"Active flocks\","," // \"Today\" panel (per-flock production)"," todayPanelTitle: \"Today\","," noFlocksMessage: \"No flocks yet — create one on the Daily entry page.\","," flockHeader: \"Flock\","," statusHeader: \"Status\","," eggsHeader: \"Eggs\","," lossesHeader: \"Losses\","," mortalityHeader: \"Mortality\","," // A flock with no entry yet — a bespoke warn badge, not a StatusBadge."," noEntryBadge: \"no entry\","," // \"Stock\" panel (by grade)"," stockPanelTitle: \"Stock\","," noStockMessage: \"No stock yet — record and submit a daily entry.\","," gradeHeader: \"Grade\","," availableHeader: \"Available\","," restrictedHeader: \"Restricted\","," eggsAvailableMessage: \"{{count}} eggs available.\","," // \"Recent sales\" panel (hidden for ReadOnly/Denied, #127)"," salesPanelTitle: \"Recent sales\","," noOrdersMessage: \"No orders yet.\","," refHeader: \"Ref\","," customerHeader: \"Customer\","," totalHeader: \"Total\","," // Water usage capture + correction screen (Task 13, #182, batch B2)."," // `water` is in TRANSLATED_NAMESPACES, same treatment as"," // nav/numberField/errorBoundary/themeToggle/useConfirm/pwa/dailyEntry/"," // dashboard above: es/tl are machine-drafted (#182), pending native"," // review. The two"," // closed-vocabulary displays on this screen — the Source picker + table"," // cell, and the Unit picker + table cell + the quantity label's unit"," // suffix — go through the `enums` `waterSourceLabel`/`waterUnitLabel`"," // helpers, not a key here — see WaterPage.tsx. Both families are"," // identity-labelled in English today, so wiring them changes nothing"," // visible (confirmed in the report)."," // #446 — feed usage promoted out of the Inventory drill-down to its own"," // page, mirroring the water namespace's shape (minus corrections: feed is"," // create-only; mis-entries are compensated via Inventory adjustments)."," feed: {"," title: \"Feed\","," // Imperative messages (event handlers / promise callbacks)."," loadFailed: \"Could not load flocks and feed items. Is the API up?\","," loadRecordsFailed: \"Could not load feed records.\","," intro:"," \"Record what each flock was fed. Stock is drawn from the oldest \""," + \"purchases first and the cost estimate comes from those lots.\","," // Capture form labels"," itemLabel: \"Item\","," // {{onHand}} is the item's current stock in {{unit}} — visible before"," // submitting, so an over-ask is caught by eye before the server refuses."," itemOption: \"{{name}} ({{onHand}} {{unit}} on hand)\","," quantityLabel: \"Quantity\","," quantityLabelWithUnit: \"Quantity ({{unit}})\","," noteLabel: \"Note\","," // Capture form buttons"," recordFeedButton: \"Record feed\","," quantityMustBePositive: \"Quantity must be a positive number.\","," recordedMessage: \"Feed recorded.\","," // Feed is create-only — corrections are lot adjustments on Inventory."," correctionsHint:"," \"A mis-entered feeding is corrected with an Inventory adjustment on the \""," + \"affected lot — feed records themselves are never edited.\","," // Records list — filters"," filterFlockLabel: \"Filter by flock\","," inactiveItemSuffix: \" — inactive, feeding out remaining stock\","," inactiveEmptyItemSuffix: \" — inactive, no stock left\","," recordsHeading: \"Records\","," fromLabel: \"From\","," toLabel: \"To\","," noRecordsMatch: \"No feed records match.\","," // Records table"," dateHeader: \"Date\","," itemHeader: \"Item\","," amountHeader: \"Amount\","," estimatedCostHeader: \"Est. cost\","," noteHeader: \"Note\","," loadMoreButton: \"load more\","," water: {"," title: \"Water\","," loadFlocksFailed: \"Could not load flocks. Is the API up?\","," loadRecordsFailed: \"Could not load water records.\","," concurrentEditError:"," \"This record was just changed elsewhere — reload the list and retry.\","," \"Record what each flock drank — a direct amount, or meter readings (the \""," + \"amount is the meter delta). Records can be corrected later; flock and \""," + \"date are fixed.\","," sourceLabel: \"Source\","," unitLabel: \"Unit\","," fromMeterReadingsLabel: \"from meter readings\","," meterStartLabel: \"Meter start\","," meterEndLabel: \"Meter end\","," // {{unit}} is the ALREADY-LABELLED (waterUnitLabel) current unit — never"," // the raw wire value."," recordWaterButton: \"Record water\","," saveCorrectionButton: \"Save correction\","," cancelEditButton: \"cancel edit\","," bothMeterReadingsRequired: \"Both meter readings are required.\","," recordedMessage: \"Water recorded.\","," recordCorrectedMessage: \"Water record corrected.\","," noRecordsMatch: \"No water records match.\","," sourceHeader: \"Source\","," metersHeader: \"Meters\","," correctButton: \"correct\","," // Egg grade catalog admin screen (Task 14, #182, batch B2 — the last B2"," // screen). `grades` is in TRANSLATED_NAMESPACES, same treatment as"," // dashboard/water above: es/tl are machine-drafted (#182), pending native"," // review. The one closed-vocabulary display on this screen — the Type"," // picker + table cell —"," // goes through the `enums` `gradeTypeLabel` helper, not a key here — see"," // GradesPage.tsx. Size/Quality/Custom are identity-labelled in English"," // today, so wiring it changes nothing visible (confirmed in the report)."," // Grade NAMES (`g.name`) are free-form farm data, not client copy, and stay"," // raw — never routed through the catalog."," grades: {"," // Titles. `title` is the loaded heading (\"Egg grades\"); `loadingTitle` is"," // the shorter pre-existing heading the two early-return states (load"," // error / still loading) used before this sweep — a pre-existing"," // inconsistency with the loaded heading, preserved verbatim rather than"," // \"fixed\" as a drive-by (not this task's job)."," title: \"Egg grades\","," loadingTitle: \"Grades\","," // imperative i18n.t() pattern)."," loadGradesFailed: \"Could not load grades. Is the API up?\","," \"Saleable grades appear in daily-entry and order pickers. Deactivating \""," + \"a grade removes it from pickers; existing stock and history are \""," + \"unaffected.\","," // Buttons. `newGradeButton` (the page's action button) and"," // `newGradeDialogTitle` happen to share English text today but are"," // separate keys, one per UI role — same treatment as"," // dailyEntry:newFlockButton/newFlockDialogTitle."," newGradeButton: \"New grade\","," newGradeDialogTitle: \"New grade\","," editGradeDialogTitle: \"Edit grade\","," addGradeButton: \"Add grade\","," // Lowercase link-styled row actions, matching sales:edit/water:correctButton."," editButton: \"edit\","," deactivateButton: \"deactivate\","," activateButton: \"activate\","," // Create-dialog form labels."," nameLabel: \"Name *\","," typeLabel: \"Type\","," sortLabel: \"Sort\","," saleableLabel: \"saleable\","," // Edit-dialog's Name label carries no required marker: the row's save"," // used to be a plain button, so native constraint validation never ran on"," // this field, and the dialog keeps that parity (see GradesPage.test.tsx)."," editNameLabel: \"Name\","," // Table headers — separate keys from the form labels above even where the"," // English text coincides (same treatment as water:flockLabel/flockHeader)."," nameHeader: \"Name\","," typeHeader: \"Type\","," sortHeader: \"Sort\","," saleableHeader: \"Saleable\","," // Saleable column's \"yes\" badge — lowercase, distinct from common.yes"," // (\"Yes\"); same case-sensitive-variant treatment as sales:close."," saleableYesBadge: \"yes\","," // Feed & inventory catalog + receiving/usage/correction screen (Task 16,"," // #182, batch B3 — the biggest B3 screen). `inventory` is in"," // themeToggle/useConfirm/pwa/dailyEntry/dashboard/water/grades above: es/tl"," // are machine-drafted (#182), pending native review. Two closed-vocabulary"," // displays go through `enums` helpers rather than a key here — see"," // InventoryPage.tsx:"," // 1. Category — the New/edit item picker option AND the items-table"," // Category cell both use `inventoryCategoryLabel`; the \"not feedable\""," // message also interpolates the labelled category, never the raw"," // wire value."," // 2. The movement LEDGER's Type cell uses `inventoryMovementLabel` (the"," // raw wire value, identity-labelled in English). The Correct-stock"," // dialog's Type PICKER is deliberately NOT wired to that helper: its"," // two options show decorated screen copy (\"Adjustment (±)\", \"Discard"," // (write-off)\") that isn't the ledger's identity label, so it stays a"," // plain `inventory` key (adjustTypeAdjustmentOption/"," // adjustTypeDiscardOption)."," // The Active/Inactive status badge uses `statusLabel` (identity in English);"," // `status=` itself stays the raw wire value. `unitCode`/`unit` and item/lot"," // names are free-form farm DATA, not client copy, and stay raw — never"," // routed through a catalog or enum helper."," inventory: {"," title: \"Feed & inventory\","," \"Receive stock as purchases; every change lands in the item's movement \""," + \"ledger. Recording feed usage against flocks arrives next.\","," loadInventoryFailed: \"Could not load inventory. Is the API up?\","," invalidCostError: \"Invalid cost.\","," itemCreatedMessage: \"Item created.\","," loadLedgerFailed: \"Could not load the movement ledger.\","," purchaseRecordedMessage: \"Purchase recorded — stock received.\","," adjustQuantityRequired: \"Adjustment quantity must be a non-zero number (negative removes stock).\","," adjustReasonRequired: \"A reason is required for corrections.\","," correctionRecordedMessage: \"Correction recorded in the ledger.\","," // Page-head button + New/edit item dialogs"," newItemButton: \"New item\","," newItemDialogTitle: \"New inventory item\","," editItemDialogTitle: \"Edit item\","," itemNameLabel: \"Item name *\","," editItemNameLabel: \"Item name\","," categoryLabel: \"Category\","," unitLabel: \"Unit *\","," editUnitLabel: \"Unit\","," defaultCostLabel: \"Default cost/unit\","," addItemButton: \"Add item\","," // Item panel (opened item)"," itemPanelHeading: \"{{name}} — {{quantity}} {{unit}} on hand\","," recordPurchaseButton: \"Record purchase\","," // #446 — the usage dialog moved to the /feed page; the panel keeps a"," // deep link that arrives with this item preselected."," recordUsageLink: \"Record usage on the Feed page\","," correctStockButton: \"Correct stock\","," // {{category}} is the ALREADY-LABELLED (inventoryCategoryLabel) category —"," // never the raw wire value. \"Feed, Supplement, and Additive\" names the"," // fixed feedable set (mirrors FEEDABLE_CATEGORIES) as screen prose, not a"," // dynamic enum render."," notFeedableMessage:"," \"{{category}} items aren't fed to flocks — usage applies to Feed, \""," + \"Supplement, and Additive items only.\","," correctionsNeedAdminMessage: \"Stock corrections need an admin.\","," noLotsMessage: \"No lots yet — corrections target a received lot.\","," // Record-purchase dialog"," recordPurchaseDialogTitle: \"Record purchase — {{name}}\","," receivedLabel: \"Received\","," // {{unit}} is the item's free-form unit code (DATA), not an enum label —"," // shared verbatim across the purchase/usage/adjust dialogs."," unitCostLabel: \"Unit cost\","," unitCostWithCurrencyLabel: \"Unit cost ({{code}})\","," costPlaceholderItemDefault: \"item default\","," costPlaceholderRequired: \"required\","," lotNumberLabel: \"Lot #\","," expiryLabel: \"Expiry\","," recordPurchaseSubmitButton: \"Record purchase\","," // Record-usage dialog"," depletedFlockSuffix: \" (depleted — backfill only)\","," // Correct-stock dialog. The Type picker's two options are DECORATED"," // screen copy, not the ledger's inventoryMovementLabel identity text —"," // see the namespace header comment above."," correctStockDialogTitle: \"Correct stock — {{name}}\","," lotFieldLabel: \"Lot\","," adjustTypeAdjustmentOption: \"Adjustment (±)\","," adjustTypeDiscardOption: \"Discard (write-off)\","," adjustQuantityPlaceholderDiscard: \"amount discarded\","," adjustQuantityPlaceholderCorrection: \"± correction\","," recordCorrectionButton: \"Record correction\","," // Movement ledger table"," ledgerDateHeader: \"Date\","," ledgerTypeHeader: \"Type\","," ledgerQuantityHeader: \"Quantity\","," ledgerNoteHeader: \"Note\","," noMovementsMessage: \"No movements yet — record a purchase above.\","," closeButton: \"close\","," // Items table"," categoryHeader: \"Category\","," onHandHeader: \"On hand\","," defaultCostHeader: \"Default cost\","," openButton: \"open\","," // Product catalog — what the farm sells — + packed-unit (egg-unit)"," // conversions admin screen (Task 17, #182, batch B3 — second B3 screen)."," // `products` is in TRANSLATED_NAMESPACES, same treatment as"," // dashboard/water/grades/inventory above: es/tl are machine-drafted (#182),"," // pending native review. The Active/Inactive status display on BOTH"," // tables (the products table's StatusBadge and the packed-unit table's plain-text"," // cell) goes through the `enums` `statusLabel` helper, not a key here —"," // see ProductsPage.tsx. `unitCode`/`defaultUnit`, product names, and grade"," // names are free-form farm/API DATA, not client copy, and stay raw — never"," // routed through the catalog or an enum helper. `eggsPerUnit` below is the"," // one COPY string that interpolates a raw DATA value (the packed-unit"," // dialog's title)."," products: {"," title: \"Products\","," // Imperative messages (the mount-effect catch, and the price parser's"," // thrown errors — caught inside the create/edit submit handlers — see"," loadCatalogFailed: \"Could not load the catalog. Is the API up?\","," enterPriceAsNumber: \"Enter the price as a plain number.\","," \"What the farm sells. Each egg product maps to an egg grade — sales \""," + \"draw stock from that grade's lots. Deactivating removes a product \""," + \"from pickers; history keeps its name.\","," // Page-head button + New/edit product dialogs. `newProductButton` (the"," // page's action button) and `newProductDialogTitle` share English text"," // today but are separate keys, one per UI role — same treatment as"," newProductButton: \"New product\","," newProductDialogTitle: \"New product\","," editProductDialogTitle: \"Edit product\","," // Product form labels — identical text in both the create and edit"," // dialogs, so one key each covers both (like inventory:defaultCostLabel)."," gradeLabel: \"Grade\","," pickGradeOption: \"Pick a grade…\","," soldPerLabel: \"Sold per\","," // {{code}} is the account's (create dialog) or the row's own snapshot"," // (edit dialog) currency code — free-form DATA, shared verbatim by both."," defaultPriceLabel: \"Default price\","," defaultPriceWithCurrencyLabel: \"Default price ({{code}})\","," // Lowercase placeholder text, distinct from common.optional (\"Optional\")"," // — same case-sensitive-variant treatment as grades:saleableYesBadge."," priceOptionalPlaceholder: \"optional\","," notesLabel: \"Notes\","," addProductButton: \"Add product\","," // Packed-unit (egg-unit-conversion) dialog. {{unitCode}} is the"," // conversion's free-form unit code (DATA) — this is COPY with a data"," // interpolation, not an enum render."," eggsPerUnit: \"Eggs per {{unitCode}}\","," // Fallback dialog title before a conversion is selected — in practice"," // never visible (the dialog only opens once editingConv is set), kept"," // for source fidelity with the pre-sweep ternary."," packedUnitDialogTitle: \"Packed unit\","," eggsPerUnitFieldLabel: \"Eggs per unit\","," // Lowercase checkbox label, distinct from enums:status.Active (\"Active\")"," // — this is the form field, not a status display."," activeCheckboxLabel: \"active\","," // Products table — separate keys from the form labels above even where"," // the English text coincides (same treatment as water:flockLabel/"," // flockHeader)."," noProductsMessage: \"No products yet.\","," soldPerHeader: \"Sold per\","," defaultPriceHeader: \"Default price\","," // Shared by BOTH tables on this screen (products + packed units) — same"," // word, same status-column meaning, on the same page."," // Row-action links, shared by BOTH tables' edit buttons (same meaning:"," // open that row's edit dialog)."," // Packed units table"," packedUnitsHeading: \"Packed units\","," packedUnitsIntro:"," \"How many eggs each unit holds when selling (a carton is 12, 18, or \""," + \"30 depending on your market — set yours). Changing a unit only \""," + \"affects future sales; recorded orders keep the count they were \""," + \"sold with.\","," unitHeader: \"Unit\","," eggsPerUnitHeader: \"Eggs per unit\","," alwaysOneMessage: \"always 1\","," // Egg stock summary + drill-down screen — by-grade balances expand into"," // lots, and each lot expands into its movement ledger (Task 18, #182, batch"," // B3 — third B3 screen). `stock` is in TRANSLATED_NAMESPACES, same"," // treatment as nav/numberField/errorBoundary/themeToggle/useConfirm/pwa/"," // dailyEntry/dashboard/water/grades/inventory/products above: es/tl are"," // machine-drafted (#182), pending native review. The one closed-vocabulary"," // display on this screen — the movement ledger's Type cell — goes through the"," // `enums` `stockMovementLabel` helper, not a key here — see StockPage.tsx."," // All eight EggMovementType values are identity-labelled in English today,"," // so wiring it changes nothing visible (confirmed in the report). There is"," // no Active/Inactive status display on this screen. Grade/lot names, dates,"," // and quantity/delta values are free-form farm DATA, not client copy, and"," // stay raw — never routed through the catalog or an enum helper."," stock: {"," title: \"Stock\","," // Imperative messages (mount-effect / drill-down catch handlers — see"," loadStockFailed: \"Could not load stock. Is the API up?\","," loadLotsFailed: \"Could not load the grade's lots.\","," loadMovementsFailed: \"Could not load the lot's movements.\","," // By-grade stock table"," // Shared by BOTH tables on this screen (by-grade balances + the lots"," // drill-down) — same word, same \"quantity available\" meaning, on the"," // same page, same treatment as products:statusHeader."," lotsButton: \"lots\","," hideLotsButton: \"hide lots\","," // {{available}}/{{grades}} are the client-side reduce totals — plain"," // numeric DATA, not enum-labelled."," totalAvailableMessage:"," \"{{available}} eggs available across {{grades}} grade(s). \""," + \"Restricted = under medication withdrawal, blocked from sale.\","," // Lots drill-down (per grade)"," lotsHeading: \"Lots\","," noLotsMessage: \"No lots for this grade yet.\","," producedOnHeader: \"Produced on\","," producedHeader: \"Produced\","," historyButton: \"history\","," hideHistoryButton: \"hide history\","," // #465 — server-side paging + production-date window over the lots table,"," // so old lots stay reachable. Same wording as the History/Audit filters."," // Movement ledger drill-down (per lot). Type reads the RAW server value"," // through stockMovementLabel — the full EggMovementType enum is covered"," // (the #406 write-off dialog's type picker reuses the same labels)."," movementLedgerHeading: \"Movement ledger\","," movementLedgerIntro:"," \"Every change to this lot's available eggs — the running sum always \""," + \"equals the balance above.\","," ledgerWhenHeader: \"When (UTC)\","," ledgerChangeHeader: \"Change\","," ledgerReasonHeader: \"Reason\","," // #406 — per-lot write-off / reconciliation (Owner/Manager only). Type"," // options reuse enums:stockMovement.* via stockMovementLabel."," writeOffButton: \"write off\","," writeOffNeedsAdminMessage: \"Stock corrections need an Owner or Manager.\","," writeOffDialogTitle: \"Correct stock — lot of {{date}}\","," writeOffTypeLabel: \"Type\","," writeOffDirectionLabel: \"Direction\","," writeOffDirectionRemoveOption: \"Remove eggs (lost or fewer than recorded)\","," writeOffDirectionAddOption: \"Add eggs back (recount found more)\","," writeOffQuantityLabel: \"Eggs\","," writeOffReasonLabel: \"Reason\","," writeOffPreviewMessage: \"{{current}} → {{result}} available\","," writeOffSubmitButton: \"Record correction\","," writeOffRecordedMessage: \"Stock correction recorded — {{available}} now available.\","," writeOffQuantityRequired: \"Enter how many eggs.\","," writeOffReasonRequired: \"A reason is required for corrections.\","," writeOffOutOfRangeMessage:"," \"The result must stay between 0 and the {{produced}} this lot produced. \""," + \"A recount above production is a daily-entry adjustment.\","," // Flock roster + bird ledger — create/edit identity fields, deplete/archive/"," // reactivate lifecycle, and mortality/cull/adjustment movements (Task 19,"," // #182, batch B3 — the last B3 screen (B4–B6 still remain in the sweep)."," // `flocks` is in TRANSLATED_NAMESPACES, same treatment as"," // dashboard/water/grades/inventory/products/stock above: es/tl are"," // machine-drafted (#182), pending native review. Two closed-vocabulary"," // FlocksPage.tsx:"," // 1. The bird ledger's Type PICKER (Cull/Adjustment — Mortality is"," // system-generated from daily-entry deaths, so it never appears there)"," // AND the ledger's Type CELL (the full Mortality/Cull/Adjustment"," // vocabulary) both use `flockMovementLabel`."," // 2. The flocks table's Status badge uses `statusLabel` (identity in"," // English); `status=` itself stays the raw wire value."," // Both are identity-labelled in English today, so wiring them changes"," // nothing visible (confirmed in the report). Flock `name`/`breed` are"," // free-form farm DATA, not client copy, and stay raw — never routed through"," // the catalog or an enum helper."," flocks: {"," title: \"Flocks\","," // Imperative messages (mount-effect / ledger-load catch handlers — see"," loadMovementsFailed: \"Could not load movements.\","," newFlockButton: \"New flock\","," \"Deplete when the birds are gone; archive to hide a flock from pickers and \""," + \"the dashboard. History keeps resolving archived flocks' names.\","," breedLabel: \"Breed *\","," // Reused verbatim by the record-movement dialog below (same text, no"," // asterisk in either) — same treatment as inventory:defaultCostLabel/"," // quantityLabelWithUnit reused across that screen's dialogs."," addFlockButton: \"Add flock\","," // Edit-flock dialog — seeded from the row."," editFlockDialogTitle: \"Edit flock\","," editNameLabel: \"Edit name\","," editBreedLabel: \"Edit breed\","," editPlacedLabel: \"Edit placement date\","," editCountLabel: \"Edit bird count\","," // Show-archived toggle. {{count}} is the client-side archived-flock"," // count — plain numeric DATA, not enum-labelled."," showArchivedLabel: \"show {{count}} archived\","," noFlocksMessage: \"No flocks yet.\","," // Flocks table — separate keys from the form labels above even where the"," // English text coincides (same treatment as water:flockLabel/"," breedHeader: \"Breed\","," placedHeader: \"Placed\","," ageHeader: \"Age\","," birdsHeader: \"Birds\","," // {{weeks}} is the client-side ageWeeks() computation — plain numeric"," // DATA, not enum-labelled."," ageWeeksSuffix: \"{{weeks}} wk\","," // Row actions — lowercase link-styled buttons, same treatment as"," // sales:edit/grades:editButton. openLedgerButton/closeLedgerButton toggle"," // the bird-ledger panel below, same treatment as stock:lotsButton/"," // hideLotsButton."," depleteButton: \"deplete\","," archiveButton: \"archive\","," reactivateButton: \"reactivate\","," openLedgerButton: \"birds\","," closeLedgerButton: \"close\","," // Deplete/archive confirm dialogs (title / body / confirmLabel). {{name}}"," // is the flock's free-form NAME (DATA), not client copy."," depleteConfirmTitle: \"Deplete \\\"{{name}}\\\"?\","," depleteConfirmBody:"," \"The flock stops accepting new entries. Backfilling past dates still works.\","," depleteConfirmLabel: \"Deplete flock\","," archiveConfirmTitle: \"Archive \\\"{{name}}\\\"?\","," archiveConfirmBody:"," \"It disappears from pickers and the dashboard, and accepts nothing new.\","," archiveConfirmLabel: \"Archive flock\","," // Bird ledger panel. {{name}} is the flock's free-form NAME (DATA)."," ledgerHeading: \"Bird ledger — {{name}}\","," ledgerIntro: \"Mortality rows come from submitted daily entries.\","," ledgerIntroAdminNote:"," \" Record culls here; use a negative adjustment to correct a miscount.\","," ledgerIntroWorkerNote: \" Recording culls and adjustments needs an admin.\","," recordMovementButton: \"Record movement\","," // Record-movement dialog. The Type picker's two options read the"," // ledger's OWN identity label (flockMovementLabel) — see the namespace"," // header comment above."," recordMovementDialogTitle: \"Record bird movement\","," recordButton: \"Record\","," noMovementsMessage: \"No movements yet — the flock is at its initial count.\","," // Movement ledger table — separate keys from the form labels above even"," // where the English text coincides (same treatment as the flocks table"," // above)."," ledgerBirdsHeader: \"Birds\","," // Farm settings — admin localization + logo (#123, #149) + the currency"," // lock (§4.6) (Task 21, #182, batch B4). `settings` is in"," // themeToggle/useConfirm/pwa/dailyEntry/dashboard/water/grades/inventory/"," // products/stock/flocks above: es/tl are machine-drafted (#182), pending"," // native review."," //"," // DATA left raw, never routed through this catalog: the timezone list"," // (Intl.supportedValuesOf), the locale/currency VALUES the admin types, the"," // \"en-US\" locale-format example (allowlisted in i18n-scan-allowlist.txt),"," // and the curated palettes' lowercase ids (aubergine/forest/slate/"," // terracotta — matched by exact-match CSS selectors and written into"," // data-brand). Their DISPLAY names (paletteAubergine etc. below) ARE copy."," // Enum wiring: the Unit system and First day of week SELECTs are closed"," // vocabularies, so their OPTION text is rendered through the shared"," // `enums.ts` helpers (unitSystemLabel/weekdayLabel — both pre-built for"," // this screen, identity labels, no visible change) rather than a key here;"," // unitSystemLabel/firstDayOfWeekLabel below are the FIELD labels, not the"," // option text. The four palette ids have no cross-screen enum family (this"," // is their only render site), so their display names are flat keys here"," // instead — see the PALETTE_LABEL_KEYS map in SettingsPage.tsx."," settings: {"," heading: \"Farm settings\","," \"How this farm names itself, and the locale, timezone and currency it \""," + \"records and reads its work in.\","," loadFailedMessage: \"Could not load farm settings.\","," // Logo panel"," logoSectionHeading: \"Logo\","," logoAlt: \"Current farm logo\","," logoLoadingMessage: \"Loading the logo…\","," logoLoadFailedMessage: \"The logo could not be loaded.\","," logoNoneMessage: \"No logo set — the sidebar shows the Cluckwork mark.\","," uploadLogoButton: \"Upload a logo\","," replaceLogoButton: \"Replace the logo\","," removeLogoButton: \"Remove\","," // {{cap}} is formatByteCap()'s already-formatted string (e.g. \"2 MB\") —"," // client-side arithmetic, never routed through i18n.language."," logoRulesHint:"," \"PNG, JPEG or WebP, up to {{cap}} and 4096 px a side. Animated \""," + \"images are not accepted. The image is stored re-written, with \""," + \"camera and location metadata removed.\","," // key — the only string on this screen interleaving JSX"," // (square), see CONTRIBUTING-i18n.md."," logoSquareHint:"," \"The logo shows small in the sidebar, about the height of a line of \""," + \"text. A simple mark and a wide wordmark both read fine there. What \""," + \"does not work is a detailed picture — at that size \""," + \"it shrinks to something unreadable, so give it to the banner below \""," + \"instead. A transparent background on a light design works best.\","," logoWorkingMessage: \"Working…\","," logoUpdatedMessage: \"Logo updated.\","," logoRemovedMessage: \"Logo removed.\","," // {{actualKb}}/{{limitKb}} are plain numeric DATA (the picked file's size"," // and the server's own configured cap), not enum-labelled."," logoOversizeMessage: \"That image is {{actualKb}} KB. The limit is {{limitKb}} KB.\","," removeLogoConfirmTitle: \"Remove the farm logo?\","," removeLogoConfirmBody:"," \"The sidebar goes back to the Cluckwork mark. You can upload another \""," + \"at any time.\","," removeLogoConfirmLabel: \"Remove logo\","," // Banner panel (#179)"," bannerSectionHeading: \"Banner\","," bannerAlt: \"Current farm banner\","," bannerLoadingMessage: \"Loading the banner…\","," bannerLoadFailedMessage: \"The banner could not be loaded.\","," bannerNoneMessage: \"No banner set — the post-login splash is skipped.\","," uploadBannerButton: \"Upload a banner\","," replaceBannerButton: \"Replace the banner\","," removeBannerButton: \"Remove\","," bannerRulesHint:"," \"PNG, JPEG or WebP, up to {{cap}} and 4096 px a side. Shown full-size on \""," + \"a post-login splash, once per sign-in — a wide or detailed image works \""," + \"well here, unlike the small sidebar logo above.\","," bannerWorkingMessage: \"Working…\","," bannerUpdatedMessage: \"Banner updated.\","," bannerRemovedMessage: \"Banner removed.\","," bannerOversizeMessage: \"That image is {{actualKb}} KB. The limit is {{limitKb}} KB.\","," removeBannerConfirmTitle: \"Remove the farm banner?\","," removeBannerConfirmBody:"," \"The post-login splash is skipped until another banner is uploaded.\","," removeBannerConfirmLabel: \"Remove banner\","," // Localization form"," localizationSectionHeading: \"Localization\","," farmNameLabel: \"Farm name\","," timezoneLabel: \"Timezone\","," timezoneUnknownWarning:"," \"This browser does not know that timezone, so dates here would follow \""," + \"the device instead of the farm. Pick one from the list.\","," localeLabel: \"Locale\","," currencyLabel: \"Currency\","," // {{code}} is the farm's currency CODE (DATA, e.g. \"USD\"), not enum-labelled."," currencyLockedNote:"," \"The currency is fixed at {{code}}: this farm has already recorded \""," + \"amounts in it. Recorded money is never re-priced, so changing this \""," + \"would leave every stored total meaning something else.\","," unitSystemLabel: \"Unit system\","," // #444 — the pack unit Daily Entry's +/− buttons count by for everyone on"," // this farm, unless a person picks their own on the Account screen."," defaultStepperUnitLabel: \"Daily Entry counting unit\","," defaultStepperUnitHint:"," \"How much the Daily Entry +/− buttons count by for everyone on this farm \""," + \"— for example Tray to count by the tray (30 eggs) instead of one egg at \""," + \"a time. Each person can pick their own on their Account screen.\","," firstDayOfWeekLabel: \"First day of week\","," // Reused for the First-day-of-week \"no override\" option AND both the"," // date/time format placeholders — same English text, same meaning, in"," // all three spots."," followLocaleOption: \"Follow the locale\","," paletteLegend: \"Farm palette\","," paletteHint:"," \"The accent colour for everyone on this farm. Each person still \""," + \"chooses light or night mode for themselves.\","," // Curated palette DISPLAY names (#149) — the ids themselves stay raw DATA"," // (see the namespace header comment above)."," paletteAubergine: \"Aubergine\","," paletteForest: \"Forest\","," paletteSlate: \"Slate\","," paletteTerracotta: \"Terracotta\","," dateFormatLabel: \"Date format\","," timeFormatLabel: \"Time format\","," // #452 — the dropdown's escape hatch to the free-text field, and that"," // field's own labels (distinct from dateFormatLabel/timeFormatLabel,"," // the dropdown's labels, since both a select and a text field are on"," // screen at once while \"Custom…\" is chosen)."," customFormatOption: \"Custom…\","," customDateFormatLabel: \"Custom date format\","," customTimeFormatLabel: \"Custom time format\","," savingButton: \"Saving…\","," saveButton: \"Save settings\","," effectNote:"," \"The timezone applies everywhere as soon as it is saved. Locale, unit \""," + \"system and the format overrides are recorded against the farm and \""," + \"will drive how amounts, dates and measurements are displayed once \""," + \"that formatting lands.\","," savedMessage: \"Settings saved.\","," // Imperative messages (event handlers — see CONTRIBUTING-i18n.md's"," versionConflictMessage:"," \"Someone else changed these settings while this screen was open. \""," + \"Reload and try again.\","," saveReadBackFailedMessage:"," \"Saved. This screen could not read the settings back — reload the \""," + \"page before saving again.\","," refreshFailedMessage:"," \"Saved. The rest of the app could not pick the change up — reload the \""," + \"page to be sure it is applied everywhere.\","," // Users admin screen — the user list plus create/edit/password/flock-"," // scoping dialogs (Task 22, #182, batch B4). `users` is in"," // products/stock/flocks/settings above: es/tl are machine-drafted (#182),"," // pending native review."," // Role enum wiring: the table's Role cell, the create-form Role picker's"," // option text, and the create-success message all render the closed"," // `role` vocabulary through roleLabel() (enums.ts) rather than a key here"," // — see the `enums` namespace header comment below for the one"," // intentional visible change that wiring makes (ReadOnly -> \"Read-only\")."," // adminRoleOption below is the one exception: the picker's Admin option"," // carries an extra \"(owner)\" qualifier that isn't part of the role's"," // identity label, so it wraps roleLabel(\"Admin\") rather than being used"," // as the option text on its own."," users: {"," heading: \"Users\","," newUserButton: \"New user\", // reused verbatim as the create-dialog title"," roleDescription:"," \"Workers record the day's work (optionally narrowed to assigned \""," + \"flocks). Managers additionally correct, void, and configure. Sales \""," + \"handles customers, orders, and payments. Read-only sees stock, \""," + \"history, and reports. Admin (owner) does everything, including \""," + \"managing users.\","," // Create-user dialog"," emailFieldLabel: \"Email *\","," passwordFieldLabel: \"Password (min 12 chars) *\","," nameFieldLabel: \"Name\", // reused verbatim by the edit-user dialog below"," roleFieldLabel: \"Role\","," // {{label}} is roleLabel(\"Admin\") (\"Admin\", identity) — see the"," // namespace header comment above."," adminRoleOption: \"{{label}} (owner)\","," createUserButton: \"Create user\","," // #308 — step-up re-confirmation, shown only for the two sensitive cases"," // (creating another Owner; resetting an existing Owner's password)."," // Shared field label; distinct hints explain WHY it appeared for each."," stepUpFieldLabel: \"Your current password *\","," stepUpCreateHint: \"Creating another Owner needs your current password again.\","," stepUpResetHint: \"Resetting an Owner's password needs your current password again.\","," stepUpRoleHint: \"Promoting someone to Owner needs your current password again.\","," // #356 — disable/enable's step-up is UNCONDITIONAL (every disable/enable"," // needs it, not just an Owner target), so these hints are shown every time"," // rather than only once a sensitive role is picked."," stepUpDisableHint: \"Disabling a user needs your current password again.\","," stepUpEnableHint: \"Re-enabling a user needs your current password again.\","," // Users table"," emailColumnHeader: \"Email\","," nameColumnHeader: \"Name\","," roleColumnHeader: \"Role\","," statusColumnHeader: \"Status\","," resetPasswordButton: \"password\","," changeRoleButton: \"role\","," changeRoleSubmitButton: \"Change role\","," flocksButton: \"flocks\","," // #356 — row actions and their badge. Disabled rows render muted with this"," // badge (StatusBadge tinted via the \"Inactive\" status, labelled distinctly"," // so it always reads \"Disabled\" rather than the generic \"Inactive\")."," disabledBadge: \"Disabled\","," disableButton: \"disable\","," enableButton: \"enable\","," // Flock-access dialog (per-worker scoping). {{email}} is the user's"," // email — DATA, not client copy."," flockAccessTitle: \"Flock access — {{email}}\","," flockAccessHint:"," \"No assignments = the worker can record for any flock. The first \""," + \"assignment narrows them to the listed flocks only.\","," noAssignmentsMessage: \"No assignments — account-wide access.\","," removeAssignmentButton: \"remove\","," assignFlockButton: \"Assign flock\","," doneButton: \"Done\","," // Edit-user dialog. {{email}} is DATA."," editUserTitle: \"Edit user — {{email}}\","," clearNameHint: \"Leave blank to clear the name.\","," // Set-password dialog. {{email}} is DATA."," setPasswordTitle: \"Set password — {{email}}\","," passwordDialogHint:"," \"You don't need their current password. Setting it signs them out \""," + \"of every device — tell them the new password directly.\","," newPasswordFieldLabel: \"New password (min 12 chars) *\","," confirmPasswordFieldLabel: \"Confirm new password *\","," // Change-role dialog (#355). {{email}} is DATA."," changeRoleTitle: \"Change role — {{email}}\","," roleDialogHint:"," \"Changing someone's role signs them out of every device. The \""," + \"account's last Owner cannot be demoted, and you cannot change \""," + \"your own role — ask another Owner.\","," // #356 — the single disable/enable dialog: it IS the confirmation, shared"," // by both modes (unconditional step-up proof, unlike the conditional"," // Owner-only prompts above). {{email}} is DATA."," disableStepUpTitle: \"Disable — {{email}}\","," enableStepUpTitle: \"Enable — {{email}}\","," disableSubmitButton: \"Disable\","," enableSubmitButton: \"Enable\","," // Destructive warning shown in the disable dialog body — what disabling"," // actually does, since this dialog is the only confirmation there is."," disableWarningBody:"," \"They will be signed out of every device immediately and won't be \""," + \"able to sign in again until you re-enable them.\","," // The reason is OPTIONAL (DisableUserCommand.Reason is nullable) — the"," // label says so plainly rather than following the \"Field *\" = required"," // convention used elsewhere on this page."," disableReasonFieldLabel: \"Reason (optional)\","," // imperative i18n.t() pattern). {{email}} is DATA; {{role}} is"," // roleLabel(role) — see the namespace header comment above."," createSuccessMessage: \"{{role}} account created for {{email}}.\","," passwordMismatchMessage: \"The passwords don't match.\","," passwordSetMessage:"," \"Password set for {{email}}. They have been signed out everywhere.\","," updatedMessage: \"Updated {{email}}.\","," roleChangedMessage: \"{{email}} is now {{role}}.\","," userDisabledMessage: \"{{email}} has been disabled.\","," userEnabledMessage: \"{{email}} has been re-enabled.\","," // Expenses screen — category management (a dialog panel: create/deactivate/"," // reactivate) + record/correct expenses, filtered by month and category"," // (Task 23, #182, batch B4 — the last B4 screen). `expenses` is in"," // products/stock/flocks/settings/users above: es/tl are machine-drafted"," // PLAN CORRECTION (verified by controller): this screen has NO"," // payment-method/category enum. `ExpenseCategory` rows are free-form,"," // admin-created records (createExpenseCategory), not a closed API"," // vocabulary — so category NAMES stay raw DATA everywhere they render (the"," // filter option, the add/edit pickers, the category-list rows, the"," // deactivated-suffix rows) and are never routed through an enums.ts helper."," // Expense descriptions, notes, dates, amounts, and flock names are the same"," // kind of free-form farm DATA and stay raw too. Money stays on the existing"," // farm-locale `formatMoney` — never `i18n.language` (formattingIndependence"," // guard)."," // Money-decimal validation copy (enterValidAmount/noDecimalPlaces/"," // atMostDecimals/enterAmountGreaterThanZero) duplicates sales/products'"," // near-identical strings but is kept as its OWN local key set here per the"," // task brief — a cross-screen consolidation is a tracked native-pass"," // deferral, not this task's job."," expenses: {"," title: \"Expenses\","," expenseRecordedMessage: \"Expense recorded.\","," expenseCorrectedMessage: \"Expense corrected.\","," // 409 rebind (onSaveEdit): someone else corrected this expense while the"," // dialog was open — the panel is rebound to the server's latest values."," conflictRebindMessage:"," \"This expense was changed by someone else — the form now shows the \""," + \"latest values; re-apply your correction.\","," categoryCreatedMessage: \"Category created.\","," // {{name}} is the category's free-form NAME (DATA), not client copy."," categoryDeactivatedMessage: \"Category \\\"{{name}}\\\" deactivated.\","," categoryReactivatedMessage: \"Category \\\"{{name}}\\\" reactivated.\","," // Amount-parsing validation (toMinorUnits, thrown from the add/edit"," // submit handlers — imperative i18n.t() pattern, same shape as"," // products:enterPriceAsNumber/noDecimalPlaces/atMostDecimals)."," // Filters"," monthLabel: \"Month\","," // Shared by the filter select, the add-form select, and the edit-form"," // select — all three already carry this identical label in source."," allCategoriesOption: \"All categories\","," hideCategoriesButton: \"hide categories\","," manageCategoriesButton: \"manage categories\","," // {{amount}} is formatMoney's already-formatted total — farm-locale DATA,"," // never routed through i18n.language."," monthTotalLabel: \"Month total: {{amount}}\","," // Category-management panel"," categoriesHeading: \"Expense categories\","," newCategoryButton: \"New category\","," newCategoryDialogTitle: \"New expense category\","," categoryNameLabel: \"Category name\","," addCategoryButton: \"Add category\","," // Appended to a deactivated category's free-form NAME (DATA) — shared by"," // the filter option, the category-list row, and the edit-form select."," deactivatedSuffix: \" (deactivated)\","," noCategoriesMessage: \"No categories yet — add one above.\","," // Record-expense form"," recordExpenseHeading: \"Record an expense\","," dateLabel: \"Date\", // shared by the add and edit forms"," pickOption: \"— pick —\","," descriptionLabel: \"Description\", // shared by the add and edit forms"," // {{code}} is the loaded/snapshot currency CODE (DATA) — shared by the"," // add form (currency.code) and the edit form (editing.currencyCode)."," amountLabel: \"Amount ({{code}})\","," flockOptionalLabel: \"Flock (optional)\", // shared by the add and edit forms"," noneOption: \"— none —\","," noteOptionalLabel: \"Note (optional)\", // shared by the add and edit forms"," recordExpenseButton: \"Record expense\","," addCategoryFirstMessage: \"Add a category first — every expense needs one.\","," // Correct-expense dialog. {{date}}/{{description}} are the expense's own"," // free-form DATA, not client copy."," correctExpenseDialogTitle: \"Correct expense\","," correctExpenseDialogTitleWithExpense: \"Correct — {{date}}, {{description}}\","," // Expenses table"," noExpensesMessage: \"No expenses for this month.\","," descriptionHeader: \"Description\","," // Customers screen — the customer book: list + create dialog, with an"," // admin-only outstanding-balance column (Task 24, #182, batch B4)."," // `customers` is in TRANSLATED_NAMESPACES, same treatment as"," // dashboard/water/grades/inventory/products/stock/flocks/settings/users/"," // expenses above: es/tl are machine-drafted (#182), pending native"," // review."," // No status/enum on this screen — Customer has no closed-vocabulary field,"," // so nothing here routes through enums.ts. Customer name/phone/email/"," // address/note are free-form farm DATA (createCustomer's own fields) and"," // stay raw everywhere they render, including the \"—\" placeholder for a"," // blank optional field (shared convention across the sweep — see"," // ExpensesPage/UsersPage/FlocksPage, which leave the em dash un-keyed too)."," // Outstanding balances stay on the existing farm-locale `formatMoney` —"," // never `i18n.language` (formattingIndependence guard)."," customers: {"," title: \"Customers\","," newCustomerButton: \"New customer\", // reused verbatim as the create-dialog title"," // Create-customer dialog"," nameFieldLabel: \"Name *\","," phoneFieldLabel: \"Phone *\","," emailFieldLabel: \"Email\","," addressFieldLabel: \"Address\","," noteFieldLabel: \"Note\","," addCustomerButton: \"Add customer\","," // Imperative messages (mount-effect .catch callbacks — see"," loadCustomersErrorMessage: \"Could not load customers.\","," loadBalancesErrorMessage: \"Could not load customer balances.\","," // Customers table"," noCustomersMessage: \"No customers yet.\","," phoneHeader: \"Phone\","," emailHeader: \"Email\","," addressHeader: \"Address\","," outstandingHeader: \"Outstanding\","," // Daily-entry history — browse recorded entries with flock/date filters,"," // plus the admin-only adjust/void corrections (Task 27, #182, batch B5 —"," // the last B4-onward records/export screen). `history` is in"," // products/stock/flocks/settings/users/expenses/customers above: es/tl are"," // machine-drafted (#182), pending native review."," // Entry-status pills (statusCell): DELIBERATELY NOT routed through the"," // shared `enums` status family, even though enums.status already carries"," // Draft/Submitted/Locked/ManagerAdjusted/Voided (Task 4/12) — this screen's"," // bespoke pills predate that helper and keep their OWN display text here"," // (statusVoided/statusAdjusted/statusLocked/statusSubmitted/statusDraft),"," // per the task brief. Text is identical to enums' labels (identity, plus"," // ManagerAdjusted -> \"Adjusted\"), so this is a naming/ownership choice, not"," // a visible difference — see the `enums` namespace header comment, which"," // already points AT this screen's own \"Adjusted\" pill as the precedent"," // Dashboard's retrofit matched. lockedAt interpolates the raw lockedAtUtc"," // timestamp (DATA) into the tooltip text (COPY)."," // The nothingToAdjustMessage 409-rebind message interpolates"," // fresh.status.toLowerCase() — lowercasing a raw wire enum value is"," // locale-fragile (only ever reads correctly in English); tracked as a"," // native-pass deferral (#182), not solved by this task (see the code"," // comment at the call site, HistoryPage.tsx rebindAfterConflict)."," // DATA left raw, never routed through this catalog: entry dates"," // (e.date/adjusting.date), flock/grade names (flockName/gradeName, with"," // their id.slice(0,8) fallback), the \"—\" placeholder for an entry with no"," // graded lines (same convention as customers/expenses/users/flocks — see"," // the `customers` namespace header comment above), free-form void/adjust"," // reasons (voidReason/adjustReason, shown via the `title` attribute or"," // interpolated verbatim into previouslyAdjusted), and every numeric count"," // (totalEggs/crackedEggs/etc., adjustedFrom's snapshot counts)."," history: {"," // Titles. `loadingTitle` is the shorter heading the early-return"," // load-error state uses before the real heading below — a pre-existing"," // inconsistency, preserved verbatim rather than \"fixed\" as a drive-by"," // (same treatment as grades:loadingTitle/title)."," loadingTitle: \"History\","," title: \"Daily entry history\","," \"Submitted and locked entries can be adjusted or voided here — stock \""," + \"and the bird ledger follow automatically; eggs already sold never \""," + \"move. A reason is always required.\","," // CONTRIBUTING-i18n.md's imperative i18n.t() pattern). Several of these"," // are near-duplicate concurrent-conflict copy at different call sites"," // (errText's own 409 branch vs. onVoid's inline 409 branch, and the two"," // \"could not reload\" variants) — kept as separate, text-preserving keys"," // rather than consolidated, matching the sweep's convention of not"," // drive-by-fixing pre-existing copy drift."," concurrentConflictMessage:"," \"This entry was just changed elsewhere — the list has been reloaded; retry.\","," loadFlocksGradesFailed: \"Could not load flocks/grades.\","," loadEntriesFailed: \"Could not load entries.\","," \"This entry was changed by someone else — the form shows the latest \""," + \"values; re-apply your correction.\","," // {{status}} is the RAW wire status, lowercased — see the locale-fragile"," // note in the namespace header comment above."," nothingToAdjustMessage: \"This entry is now {{status}} — nothing left to adjust.\","," // Describes what actually failed HERE: the form's fetch of the winning"," // entry's values. The list is refreshed by the write path and reports its"," // own health separately — this branch never touches it (#469)."," conflictRebindFailedMessage:"," \"This entry was changed by someone else, and its latest values could \""," + \"not be loaded — close the form and try again.\","," // #394 — an adjustment has no draft state: grading must reconcile"," // EXACTLY to the sellable count (short or over both trigger this),"," // the same rule Daily Entry's submit uses."," gradesMustReconcileMessage:"," \"Graded quantities must equal total eggs minus cracked, dirty, and discarded eggs.\","," entryAdjustedMessage: \"Entry adjusted — stock and bird ledger updated to match.\","," // askReason dialog (title / body / confirmLabel). {{date}}/{{flock}} are"," // the entry's own free-form DATA (date string, resolved flock name)."," voidConfirmTitle: \"Void the {{date}} entry for {{flock}}?\","," voidConfirmBody:"," \"Its egg lots empty and its deaths are reversed. The entry is kept as \""," + \"Voided. Refused if any of its eggs were already sold.\","," voidConfirmLabel: \"Void entry\","," entryVoidedMessage: \"Entry voided — its egg lots were emptied and its deaths reversed.\","," // Says what the CONFLICT was and nothing about the list: whether the"," // refresh landed is the list's own business, and it reports that itself"," // through loadEntriesFailed. Three review rounds came from the previous"," // wording claiming \"the list has been reloaded\" — a promise the screen"," // could not keep, and every attempt to keep it added machinery (#469)."," voidConflictMessage: \"This entry was changed by someone else — check the list and retry.\","," allFlocksOption: \"All flocks\","," // Adjust dialog — title (two shapes: an entry bound vs. the fallback"," // before one is), the \"previously adjusted\" recap, and the form."," adjustDialogTitle: \"Adjust entry\","," adjustDialogTitleWithEntry: \"Adjust — {{date}}, {{flock}}\","," // {{total}}/{{mortality}} are the prior snapshot's numeric DATA;"," // {{reason}} is the free-form adjustReason DATA."," previouslyAdjusted:"," \"Previously adjusted (was total {{total}}, mortality {{mortality}} — \\\"{{reason}}\\\").\","," // The dialog's two steps, its count labels and its reconciliation chip come"," // from the `dailyEntry` namespace: the correction form IS that screen's"," // form, and a second near-duplicate set here is how the two drifted (this"," // namespace used to say \"Deaths\" where the capture screen said"," // \"Mortality\"). Only what is genuinely this dialog's own stays below."," // Appended to a grade line's free-form NAME (DATA) for a deactivated"," // grade still on the entry — distinct wording from"," // dailyEntry:deactivatedGradeSuffix (\" (deactivated)\"), preserved"," // verbatim rather than reconciled (not this task's job)."," inactiveGradeSuffix: \" (inactive)\","," saveAdjustmentButton: \"Save adjustment\","," noEntriesMatch: \"No entries match — record one on the Daily entry page.\","," // Entries table"," lossesHeader: \"Losses (cr/di/ds)\","," // #396 — Losses counts cracked/dirty/discarded whatever became of them;"," // this counts only the ones that became stock, per the entry's snapshot."," // Em dash on a draft: nothing has resolved yet, and 0 would claim \"loss\"."," conditionHeader: \"Condition\","," gradedHeader: \"Graded\","," // Lowercase link-styled row actions, same treatment as"," // sales:edit/water:correctButton/grades:editButton."," adjustButton: \"adjust\","," voidButton: \"void\","," // Entry-status pills (statusCell) — see the namespace header comment"," // above for why this is a separate vocabulary from enums:status."," statusVoided: \"Voided\","," statusAdjusted: \"Adjusted\","," statusLocked: \"Locked\","," // {{time}} is the raw lockedAtUtc timestamp (DATA)."," lockedAt: \"Locked {{time}}\","," statusSubmitted: \"Submitted\","," statusDraft: \"Draft\","," // Task 28 (#182, B5) — ReportsPage. `reports` is in TRANSLATED_NAMESPACES,"," // same as `history`/`nav`: es/tl are machine-drafted (#182), pending"," // native review. Production renders for everyone; the Money section"," // (sales/expenses/profit) is admin-gated — isAdmin is checked by the"," // component, not this catalog."," // DATA left raw, never routed through this catalog: every date"," // (d.date/from/to), every numeric count/total (totalEggs, cracked/dirty/"," // discarded, sellable, deaths, henDays, henDayPct and their period"," // equivalents), the \"—\" em-dash fallback for a null henDayPct (same"," // convention as customers/expenses/users/flocks/history's raw \"—\"), the"," // grade-totals and expense-category lists (built from free-form"," // name/quantity DATA via template-literal `.join(\", \")`, matching"," // HistoryPage's gradeName-list precedent), and every money string"," // (formatMoney is farm-locale-driven, never keyed off i18n.language —"," // interpolated into the templates below as pre-formatted DATA, same"," // pattern as sales:orderTotal)."," reports: {"," title: \"Reports\","," productionHeading: \"Production\","," sellableHeader: \"Sellable\","," // #396 — cracked/dirty eggs that became stock instead of being written off."," // \"Condition\" is the term the specs and glossary already use for those two"," // grades; deliberately NOT \"ungraded\" (they do carry a grade, shown in the"," // By-grade breakdown on this same screen) and NOT \"seconds\" (a real seeded"," // grade name, which would make the column and the breakdown disagree)."," deathsHeader: \"Deaths\","," henDaysHeader: \"Hen-days\","," henDayPctHeader: \"Hen-day %\","," periodRowLabel: \"Period\","," gradeTotalsLabel: \"By grade:\","," moneyHeading: \"Money\","," salesRowLabel: \"Sales\","," // {{count}} is confirmedCount; {{revenue}}/{{paid}}/{{outstanding}} are"," // pre-formatted formatMoney() strings (DATA)."," salesSummary:"," \"{{count}} confirmed order(s) — revenue {{revenue}}, paid {{paid}}, outstanding {{outstanding}}\","," // {{count}} is voidedCount — a second, independent {{count}} interpolation"," // on the same screen, appended only when voidedCount > 0."," salesVoidedSuffix: \" ({{count}} voided)\","," expensesRowLabel: \"Expenses\","," expensesNone: \"none recorded\","," // {{total}} is expenses.grandTotalMinorUnits, pre-formatted (DATA)."," expensesTotalSuffix: \" — total {{total}}\","," profitRowLabel: \"Profit (basic)\","," // (not t()) — the only JSX interleaved in this screen's prose is"," // the around the profit figure, same treatment as"," // account:roleLine. {{revenue}}/{{expenses}}/{{profit}} are pre-formatted"," // formatMoney() strings (DATA); the \"−\" is U+2212 MINUS SIGN (matching"," // the pre-sweep source), not a hyphen."," profitLine: \"revenue {{revenue}} − expenses {{expenses}} = {{profit}}\","," profitFootnote:"," \"\\\"Basic\\\" profit is confirmed revenue minus recorded expenses — no \""," + \"cost-of-goods or inventory valuation.\","," // Task 29 (#182, B5) — AuditPage. `audit` is in TRANSLATED_NAMESPACES, same"," // as `history`/`nav`/`reports`: es/tl are machine-drafted (#182), pending"," // native review. The #93 read-only audit trail (admin). The action/entity"," // table cells and the action filter's option text route through"," // enums:auditAction.*/enums:entityType.* (also translated — see the"," // `enums` header comment below), NOT this namespace. DATA left raw, never"," // routed through this catalog:"," // every timestamp (e.occurredAtUtc), actorEmail, entityId, and the \"—\""," // em-dash fallback for a null reason (same convention as"," // customers/expenses/users/flocks/history's raw \"—\")."," audit: {"," heading: \"Audit log\","," \"Every corrective, destructive, or configuration change — who did it, \""," + \"when, and why. Rows are written with the change itself and never \""," + \"edited.\","," // #493 — entity-scoped mode (AuditPage read with ?entityId=), reached"," // from a record's own screen via recordHistory.viewHistoryLink. Shown"," // instead of `heading` once the first scoped page has loaded; the"," // entityType comes from the first response row's own entityType field,"," // never from the URL (Gate 2 — no unvalidated display-only param)."," scopedHeading: \"{{entityType}} history\","," // Shown instead of scopedHeading before the first scoped page has"," // loaded, or if the entity has zero audit events — deliberately not"," // distinguishing those two cases (Gate 3)."," scopedHeadingFallback: \"Record history\","," entityTypeFilterLabel: \"Record type\","," allEntityTypesOption: \"All types\","," actionFilterLabel: \"Action\","," allActionsOption: \"All actions\","," whenHeader: \"When (UTC)\","," whoHeader: \"Who\","," actionHeader: \"Action\","," entityHeader: \"Entity\","," reasonHeader: \"Reason\","," emptyMessage: \"No audit events yet.\","," scopedEmptyMessage: \"No audit events for this record yet.\","," // Task 30 (B5, #182) — ExportPage: the manual-backup screen (#95,"," // admin-only). `export` is in TRANSLATED_NAMESPACES, same as"," // `audit`/`history`: es/tl are machine-drafted (#182), pending native"," // review. CSV column headers and file contents are generated SERVER-side"," // (Cluckwork.Api/Endpoints/Export/CsvExport.cs) and are NOT"," // client strings — out of scope here. Only the visible page copy below"," // (headings, buttons, and the dataset picker's own labels) is externalized;"," // the download filenames (`cluckwork-${d}.csv`, \"cluckwork-backup.zip\")"," // stay raw, unkeyed — they're functional identifiers, not display copy, and"," // changing them would be a download-mechanics change (out of scope)."," export: {"," heading: \"Export\","," \"Download your account's data as CSV files — a manual backup you can \""," + \"keep anywhere. Money values are exported in minor units (cents) \""," + \"with their currency, exactly as stored.\","," fullBackupHeading: \"Full backup\","," fullBackupButton: \"Download full backup (zip)\","," fullBackupHint: \"One zip with every dataset below plus a manifest of row counts.\","," // Shared between the full-backup button and every dataset button (each"," // uses its own `busy === ` check) — one in-flight-download label,"," // not a per-button duplicate."," preparingButton: \"Preparing…\","," singleDatasetsHeading: \"Single datasets\","," // Dataset picker labels — one flat \"dataset.\" key per"," // EXPORT_DATASETS member (../api/cluckwork), text IDENTICAL to the raw"," // wire slug (same \"value equals the enum member\" convention as"," // sales:unit*/method*, en.ts ~L252). Keeps the button's accessible name"," // byte-identical to the pre-sweep raw `{d}` render while routing display"," // through the catalog, as the task brief requires (\"a dataset NAME"," // displayed as a picker label is page copy\"). A future native-translation"," // pass can replace these with humanized/localized text without touching"," // ExportPage.tsx."," \"dataset.flocks\": \"flocks\","," \"dataset.bird-movements\": \"bird-movements\","," \"dataset.daily-entries\": \"daily-entries\","," \"dataset.daily-entry-grades\": \"daily-entry-grades\","," \"dataset.egg-grades\": \"egg-grades\","," \"dataset.egg-lots\": \"egg-lots\","," \"dataset.customers\": \"customers\","," \"dataset.sales-orders\": \"sales-orders\","," \"dataset.sales-order-items\": \"sales-order-items\","," \"dataset.sales-order-allocations\": \"sales-order-allocations\","," \"dataset.payments\": \"payments\","," \"dataset.inventory-items\": \"inventory-items\","," \"dataset.inventory-lots\": \"inventory-lots\","," \"dataset.inventory-movements\": \"inventory-movements\","," \"dataset.feed-usages\": \"feed-usages\","," \"dataset.water-usages\": \"water-usages\","," \"dataset.expense-categories\": \"expense-categories\","," \"dataset.expenses\": \"expenses\","," \"dataset.egg-inventory-movements\": \"egg-inventory-movements\","," \"dataset.audit-events\": \"audit-events\","," // Closed-vocabulary labels (#182, Task 4). Consumed ONLY through the typed"," // helpers in enums.ts — never a raw t(\"enums:status.\" + value). Keys are FLAT"," // \"family.RawValue\" strings (keySeparator:false, see index.ts): the suffix is"," // the EXACT wire value the API sends, so the helper's Record can map value →"," // key mechanically and the key is self-documenting. `enums` IS in"," // TRANSLATED_NAMESPACES: es/tl carry machine-drafted enum translations"," // (#182, pending native review)."," // Labels are chosen to be TEXT-PRESERVING on retrofit (Task 5+) — a screen"," // wired to a helper keeps its current text — EXCEPT at two sites the retrofit"," // changes DELIBERATELY (its reviewer must eyeball them):"," // 1. Dashboard.tsx (``, no label) used to"," // show a ManagerAdjusted entry RAW; statusLabel (wired in Task 12) now"," // makes it read \"Adjusted\" — the text HistoryPage already shows for"," // that state via its own bespoke `Adjusted` (HistoryPage.tsx 249-250), NOT a"," // StatusBadge label."," // 2. UsersPage.tsx role table cell renders raw `{u.role}` = \"ReadOnly\";"," // roleLabel makes it read \"Read-only\" (matching the picker option)."," // Payment method and sale unit are intentionally absent — they already live"," // in the `sales` namespace (sales:method*/unit*, which carries its own"," // es/tl). `enums` is in TRANSLATED_NAMESPACES too (#182, pending native"," // review), so duplicating them here is no longer needed to avoid an"," // English-only regression — it would just be a redundant second copy of"," // the same vocabulary."," enums: {"," // status — StatusBadge's STATUS_VALUES vocabulary. Identity except"," // ManagerAdjusted, whose pill reads \"Adjusted\"."," \"status.Active\": \"Active\","," \"status.Inactive\": \"Inactive\","," \"status.Draft\": \"Draft\","," \"status.Submitted\": \"Submitted\","," \"status.Locked\": \"Locked\","," \"status.ManagerAdjusted\": \"Adjusted\","," \"status.Voided\": \"Voided\","," \"status.Confirmed\": \"Confirmed\","," \"status.Shipped\": \"Shipped\","," \"status.Invoiced\": \"Invoiced\","," \"status.Cancelled\": \"Cancelled\","," \"status.Depleted\": \"Depleted\","," \"status.Archived\": \"Archived\","," // role (UsersPage) — Roles.Assignable + Worker. \"ReadOnly\" labelled"," // \"Read-only\" (matches the picker option); the raw u.role table column and"," // the picker's \"Admin (owner)\" hint are noted in the report as retrofit"," // discrepancies."," \"role.Worker\": \"Worker\","," \"role.Admin\": \"Admin\","," \"role.Manager\": \"Manager\","," \"role.Sales\": \"Sales\","," \"role.ReadOnly\": \"Read-only\","," // water source (WaterPage picker) — WaterSource enum."," \"waterSource.Well\": \"Well\","," \"waterSource.Municipal\": \"Municipal\","," \"waterSource.Tank\": \"Tank\","," \"waterSource.Other\": \"Other\","," // water unit (WaterPage picker) — WaterUsage.AllowedUnits, a fixed 2-value"," // set. Labels are the unit symbols, unchanged."," \"waterUnit.L\": \"L\","," \"waterUnit.gal\": \"gal\","," // grade type (GradesPage picker) — EggGradeType enum."," \"gradeType.Size\": \"Size\","," \"gradeType.Quality\": \"Quality\","," \"gradeType.Custom\": \"Custom\","," // inventory category (InventoryPage picker) — InventoryCategory enum."," // \"EquipmentPart\" kept as one word to match current display."," \"inventoryCategory.Feed\": \"Feed\","," \"inventoryCategory.Supplement\": \"Supplement\","," \"inventoryCategory.Additive\": \"Additive\","," \"inventoryCategory.Medication\": \"Medication\","," \"inventoryCategory.Vaccine\": \"Vaccine\","," \"inventoryCategory.Packaging\": \"Packaging\","," \"inventoryCategory.Bedding\": \"Bedding\","," \"inventoryCategory.Sanitation\": \"Sanitation\","," \"inventoryCategory.EquipmentPart\": \"EquipmentPart\","," \"inventoryCategory.Other\": \"Other\","," // inventory movement type (InventoryPage ledger) — InventoryMovementType"," // enum. The ledger shows the raw server value, so the full enum is covered"," // (the adjust picker only offers Adjustment/Discard)."," \"inventoryMovement.Purchase\": \"Purchase\","," \"inventoryMovement.Usage\": \"Usage\","," \"inventoryMovement.Adjustment\": \"Adjustment\","," \"inventoryMovement.Discard\": \"Discard\","," // flock (bird) movement type (FlocksPage ledger) — BirdMovementType enum."," // Mortality is system-generated (from daily-entry deaths); the record picker"," // only offers Cull/Adjustment."," \"flockMovement.Mortality\": \"Mortality\","," \"flockMovement.Cull\": \"Cull\","," \"flockMovement.Adjustment\": \"Adjustment\","," // egg stock movement type (StockPage lot ledger) — EggMovementType enum."," // \"InternalUse\" kept as one word to match current display."," \"stockMovement.Production\": \"Production\","," \"stockMovement.Sale\": \"Sale\","," \"stockMovement.Adjustment\": \"Adjustment\","," \"stockMovement.Discard\": \"Discard\","," \"stockMovement.InternalUse\": \"InternalUse\","," \"stockMovement.Transfer\": \"Transfer\","," \"stockMovement.Reconciliation\": \"Reconciliation\","," \"stockMovement.Void\": \"Void\","," // unit system (SettingsPage picker) — UnitSystem enum."," \"unitSystem.Metric\": \"Metric\","," \"unitSystem.Imperial\": \"Imperial\","," // weekday (SettingsPage week-start picker) — standalone day-name labels."," \"weekday.Sunday\": \"Sunday\","," \"weekday.Monday\": \"Monday\","," \"weekday.Tuesday\": \"Tuesday\","," \"weekday.Wednesday\": \"Wednesday\","," \"weekday.Thursday\": \"Thursday\","," \"weekday.Friday\": \"Friday\","," \"weekday.Saturday\": \"Saturday\","," // audit action (AuditPage filter/table) — AuditEvent.action, a server"," // \"Entity.Verb\" capture-point code (#182, Task 29). Flat"," // \"auditAction.Entity.Verb\" keys: keySeparator:false treats the whole"," // dotted code as ONE literal key segment, so e.g. \"DailyEntry.Adjust\""," // becomes the key \"auditAction.DailyEntry.Adjust\", not a nested path."," \"auditAction.DailyEntry.Adjust\": \"Daily entry adjusted\","," \"auditAction.DailyEntry.Void\": \"Daily entry voided\","," \"auditAction.SalesOrder.Void\": \"Sales order voided\","," \"auditAction.Payment.Void\": \"Payment voided\","," \"auditAction.Expense.Adjust\": \"Expense adjusted\","," \"auditAction.ExpenseCategory.Update\": \"Expense category updated\","," \"auditAction.InventoryItem.Adjust\": \"Inventory item adjusted\","," \"auditAction.WaterUsage.Correct\": \"Water usage corrected\","," \"auditAction.Flock.BirdMovement\": \"Bird movement recorded\","," \"auditAction.Flock.Update\": \"Flock updated\","," \"auditAction.Flock.Deplete\": \"Flock depleted\","," \"auditAction.Flock.Archive\": \"Flock archived\","," \"auditAction.Flock.Reactivate\": \"Flock reactivated\","," \"auditAction.EggGrade.Update\": \"Egg grade updated\","," \"auditAction.EggGrade.Activate\": \"Egg grade activated\","," \"auditAction.EggGrade.Deactivate\": \"Egg grade deactivated\","," \"auditAction.User.Create\": \"User created\","," \"auditAction.User.Update\": \"User updated\","," \"auditAction.User.PasswordSet\": \"Password set\","," \"auditAction.User.PasswordChanged\": \"Password changed\","," \"auditAction.User.BreakGlassReset\": \"Break-glass reset\","," \"auditAction.User.RoleChanged\": \"Role changed\","," \"auditAction.User.Disabled\": \"User disabled\","," \"auditAction.User.Enabled\": \"User enabled\","," \"auditAction.User.FlockAssign\": \"Flock assigned to user\","," \"auditAction.User.FlockUnassign\": \"Flock unassigned from user\","," \"auditAction.Account.Export\": \"Data exported\","," \"auditAction.Account.SetLogo\": \"Farm logo set\","," \"auditAction.Account.RemoveLogo\": \"Farm logo removed\","," \"auditAction.Account.SetBanner\": \"Farm banner set\","," \"auditAction.Account.RemoveBanner\": \"Farm banner removed\","," \"auditAction.Account.UpdateSettings\": \"Farm settings updated\","," \"auditAction.Product.Create\": \"Product created\","," \"auditAction.Product.Update\": \"Product updated\","," \"auditAction.Product.Activate\": \"Product activated\","," \"auditAction.Product.Deactivate\": \"Product deactivated\","," \"auditAction.EggUnitConversion.Update\": \"Egg unit conversion updated\","," \"auditAction.EggLot.Movement\": \"Stock written off / recounted\","," \"auditAction.Flock.Create\": \"Flock created\","," \"auditAction.DailyEntry.Create\": \"Daily entry created\","," \"auditAction.DailyEntry.Update\": \"Daily entry draft edited\","," \"auditAction.DailyEntry.Submit\": \"Daily entry submitted\","," \"auditAction.SalesOrder.AddItem\": \"Order line added\","," \"auditAction.SalesOrder.UpdateItem\": \"Order line changed\","," \"auditAction.SalesOrder.RemoveItem\": \"Order line removed\","," \"auditAction.SalesOrder.Create\": \"Sales order created\","," \"auditAction.SalesOrder.Confirm\": \"Sales order confirmed\","," \"auditAction.SalesOrder.Cancel\": \"Sales order cancelled\","," \"auditAction.Expense.Create\": \"Expense created\","," \"auditAction.EggGrade.Create\": \"Egg grade created\","," // entity type (AuditPage table entity cell) — AuditEvent.entityType."," \"entityType.Account\": \"Account\","," \"entityType.DailyEntry\": \"Daily entry\","," \"entityType.EggGrade\": \"Egg grade\","," \"entityType.EggLot\": \"Egg lot\","," \"entityType.EggUnitConversion\": \"Egg unit conversion\","," \"entityType.Expense\": \"Expense\","," \"entityType.ExpenseCategory\": \"Expense category\","," \"entityType.FarmLogo\": \"Farm logo\","," \"entityType.Flock\": \"Flock\","," \"entityType.InventoryItem\": \"Inventory item\","," \"entityType.Payment\": \"Payment\","," \"entityType.Product\": \"Product\","," \"entityType.SalesOrder\": \"Sales order\","," \"entityType.User\": \"User\","," \"entityType.WaterUsage\": \"Water usage\","," // Task 32 (B6a, #182): HelpPage prose, getting-around through mistakes"," // (INCLUDING the \"Fixing mistakes\" table). The glossary table (h3"," // id=\"glossary\") is deliberately NOT here yet — Task 33 (B6b) owns it; see"," // HelpPage.tsx's scope comment. keys use NAMED tags (,"," // ) matching the components map at each call site, never numbered"," // <0>/<1>. toc* keys are the contents-rail labels — the rail's `id`s stay"," // hardcoded in HelpPage.tsx (they drive the scroll-spy +
anchors)."," help: {"," eyebrow: \"User guide\","," heading: \"Help\","," lead: \"How Cluckwork works, screen by screen — and how to undo mistakes.\","," contentsAriaLabel: \"Help contents\","," contentsEyebrow: \"Contents\","," // Contents-rail labels (TOC array, 2nd element). Order mirrors the sections below — see the KEEP comment at the top of"," // HelpPage.tsx. tocGlossary is the rail's link text only; the glossary"," // SECTION itself (heading + 37-row table + closing note) is externalized"," // further down, near the end of this block (Task 33, B6b)."," tocGettingAround: \"Getting around\","," tocSigningIn: \"Signing in\","," tocDailyLoop: \"The daily loop\","," tocRoles: \"Who can do what\","," tocDialogs: \"Adding & correcting\","," tocDailyEntry: \"Daily entry\","," tocFlocks: \"Flocks & birds\","," tocGrades: \"Egg grades\","," tocProducts: \"Products\","," tocStock: \"Stock\","," tocInventory: \"Supplies & inventory\","," tocFeed: \"Feed\","," tocWater: \"Water\","," tocSales: \"Customers & sales\","," tocReports: \"Reports\","," tocExpenses: \"Expenses\","," tocHistory: \"History\","," tocAudit: \"Audit log\","," tocExport: \"Export & backup\","," tocFarmSettings: \"Farm settings\","," tocFarmPalette: \"Farm palette\","," tocAccount: \"Your account\","," tocInstall: \"Install on a phone\","," tocMistakes: \"Fixing mistakes\","," tocGlossary: \"Glossary\","," // Getting around"," gettingAroundHeading: \"Getting around\","," gettingAroundSidebar:"," \"On a computer, every screen sits in the sidebar on the left, grouped by job.\","," gettingAroundTabs:"," \"On a phone, the screens you use most are tabs across the bottom, in easy thumb reach. \""," + \"Which four you get depends on your role — a worker gets Daily entry, someone in sales gets Sales. \""," + \"Everything else is one tap away under More.\","," gettingAroundErrorScreen:"," \"If a screen ever shows \\\"Something went wrong\\\", that is the app catching an error \""," + \"instead of leaving you on a blank page. Anything you had already saved is safe (anything you were \""," + \"still typing may need to be entered again) — tap Reload, or Back to the \""," + \"dashboard and try again. If it keeps happening, open \\\"Error details\\\" and send a screenshot.\","," gettingAroundWhereMessagesAppear:"," \"A message about something that failed appears where the work is: if you were filling in \""," + \"a pop-up form, it appears inside that form, next to the fields it is about; if it was the screen itself \""," + \"— a list that would not load, say — it appears on the screen behind. So a form that refuses to save \""," + \"always tells you why without closing. Closing the form drops its message: that attempt is over, and \""," + \"anything the screen itself reported stays put.\","," // Signing in"," signingInHeading: \"Signing in\","," signingInBasic:"," \"Sign in with the email and password your administrator set up. A wrong password just says \""," + \"Invalid email or password — try again.\","," signingInRateLimit:"," \"To slow down anyone guessing passwords, sign-in attempts from the same place are limited. \""," + \"After too many tries in a few minutes you'll see \\\"Too many sign-in attempts\\\" — that \""," + \"isn't a fault, just wait a few minutes and try again. Being signed in already is never \""," + \"affected; your work carries on normally.\","," signingInAccountLock:"," \"Separately, too many wrong passwords for one account briefly lock that account. While \""," + \"it is locked, even the correct password still says Invalid email or password. The \""," + \"lock is temporary — wait up to about 15 minutes and try again.\","," signingInPersistence:"," \"Your sign-in is kept in your browser securely and stays active as you work, even across reloads and \""," + \"with the app open in several tabs at once. After the app is updated \""," + \"you may be asked to sign in once more — that's expected.\","," // #393 — revokeSupersededCookie() now always revokes a superseded flight's"," // cookie, including the rare branch where the newer sign-in's own cookie"," // was the one caught by that revoke. User-visible result: an unexpected"," // \"please sign in again\" shortly after switching accounts across tabs."," signingInMultiTabResync:"," \"Signing in as someone else in one browser tab while another tab of the same browser is \""," + \"midway through its own quiet check can occasionally sign you back out right after — just sign in \""," + \"again. This only happens in that narrow multi-tab moment and never loses anything you already saved.\","," // #283 — first-run provisioning: no default credential ever ships with"," // the app, so the very first sign-in always starts from a printed"," // one-time password."," signingInFirstRun:"," \"First sign-in on a brand-new farm. There is no default password — an operator runs a \""," + \"one-time setup command that prints a temporary one. Sign in with it and you'll immediately land on a \""," + \"Set your password screen instead of the normal app; nothing else works until you pick \""," + \"your own password there. This is separate from an ordinary Change password. Until that setup \""," + \"step has been run, trying to sign in tells you so and points you at whoever administers the server, \""," + \"rather than claiming your details were wrong.\","," // #308 — step-up re-confirmation for the two sensitive user-administration"," // actions. Deliberately does NOT mention \"grant\"/\"token\" — that's internal"," // mechanism, not user-facing language."," signingInStepUp:"," \"Five actions on the Users screen ask you to re-enter your current password \""," + \"right there in the dialog: creating another Owner, resetting an existing Owner's password, promoting \""," + \"someone to Owner, and — whatever the target's role — disabling or re-enabling a user. This confirms it's \""," + \"really you before handing out that much access or cutting someone else's off; every other action on that \""," + \"screen (creating a Worker/Manager/Sales/Read-only user, resetting one of their passwords, changing \""," + \"someone's role to anything other than Owner) does not ask again.\","," signingInCredentialEpoch:"," \"When an administrator resets a password, your existing sign-in can be invalidated immediately. If you \""," + \"see a message that your credentials changed, sign in again with your current password.\","," interfaceLanguage:"," \"Interface language. Everyone can choose the language the interface is shown in from \""," + \"Account → Preferences — English, Español, or Tagalog. Translation is a work in \""," + \"progress: the login and sales screens, error messages, and Account → Preferences \""," + \"itself are translated today; the rest of the Account screen (including the password section) and the \""," + \"rest of the app are being translated screen by screen. Until a screen is translated it simply shows \""," + \"in English, whatever language you picked.\","," // The daily loop"," dailyLoopHeading: \"The daily loop\","," dailyLoopChain:"," \"Everything in Cluckwork hangs off one chain: you record a daily entry for each flock \""," + \"(eggs by grade, losses, deaths), you submit it, and submitting creates dated \""," + \"egg lots — that's your sellable stock. A sales \""," + \"order takes from stock when you confirm it, always oldest eggs first. Feed flows the same \""," + \"way on the input side: purchases put feed into stock, daily usage draws it down per flock.\","," dailyLoopSummary: \"Record entry → submit → egg lots → stock → order → confirm.\","," // Who can do what"," rolesHeading: \"Who can do what\","," rolesWorkers:"," \"Five kinds of sign-in. Workers run the daily loop — record and submit entries, \""," + \"receive feed, record feed and water usage, create flocks and customers, take orders from draft \""," + \"through confirm. A worker can be narrowed to assigned flocks: with no assignments \""," + \"they can record for any flock; the first assignment restricts them to the listed ones.\","," rolesManagers:"," \"Managers do everything workers do, plus everything that undoes, corrects, or \""," + \"configures: voids, stock and water corrections, flock lifecycle, culls, the \""," + \"grade/product/item catalogs, expenses, money reports, the audit log, and exports.\","," rolesSalesReadOnly:"," \"Sales sign-ins handle customers, orders, and payments — but no \""," + \"production capture and no expenses. Read-only sign-ins see stock, history, and \""," + \"reports, and can change nothing.\","," rolesAdmin:"," \"Admin (owner) does everything a manager does and is the only role that manages users: \""," + \"creating sign-ins on the Users screen (email, password, an optional name, and role) \""," + \"and assigning workers to flocks. A user's name can be changed later from the row's edit \""," + \"action, and the password action sets a forgotten password without needing the old \""," + \"one. The role action promotes or demotes an existing user among the five roles — it \""," + \"refuses targeting your own sign-in, and refuses demoting the account's last Admin (owner), so the farm \""," + \"can never lock itself out of user administration. Promoting someone to Admin (owner) asks for the same \""," + \"re-confirmation as resetting an Admin's password (see below); every other role change needs no \""," + \"re-confirmation. A role change signs the affected sign-in out everywhere on its next request, the same \""," + \"way a password reset does. Controls you can't use are hidden, \""," + \"and the server refuses them regardless.\","," // #356 — disable/re-enable a colleague's sign-in."," rolesDisableUser:"," \"Disabling a sign-in (Users screen, Admin/owner only) cuts off access immediately — \""," + \"every one of that person's open sessions ends on its very next request, the same as a role change or \""," + \"password reset. A reason is optional, and either way it lands in the audit log. \""," + \"Re-enable restores their ability to sign in, but never revives the sessions the \""," + \"disable ended — they sign in fresh with their existing password. You can't disable your own sign-in, \""," + \"and you can't disable the account's last Admin (owner).\","," ownPassword:"," \"Your own password. Anyone, in any role, can change their own password on the \""," + \"Account screen by entering the current one and a new one (at least 12 characters). \""," + \"Changing your own password keeps this device signed in with fresh credentials and ends every \""," + \"other open session on its next request. If an admin sets your password instead, every one \""," + \"of your open sessions ends on its next request.\","," // Adding & correcting"," dialogsHeading: \"Adding & correcting\","," dialogsPopup:"," \"Adding and correcting happen in a popup. Look for the New … button beside the \""," + \"screen's title — new grade, product, customer, flock, item, user, order. Each row's \""," + \"edit or correct link opens the same popup with that row's values \""," + \"already filled in.\","," dialogsDrillDowns:"," \"Drill-downs work the same way. Open a flock's birds ledger to record a cull, an \""," + \"inventory item to record a purchase, feed usage, or a stock correction, an order to record a \""," + \"payment, or a worker's flocks to manage their access — the ledger stays \""," + \"where it is and the form comes to you.\","," dialogsCancel:"," \"Cancel, Escape, or a click outside closes the popup, records nothing, and clears \""," + \"what you typed — reopen it and you start from a blank form. If a save fails, the popup stays open \""," + \"with your values and the reason, so you can fix it and try again — retrying is safe, it never \""," + \"records the same thing twice.\","," dialogsModal:"," \"While a popup is open the page behind it waits: clicks, the Tab key and a screen \""," + \"reader all stay inside the form, so nothing behind it can be changed by accident, and Escape closes \""," + \"the popup you are working in.\","," dialogsInlineForms:"," \"The screens whose whole job is capture keep their form on the page: Daily entry, \""," + \"Water, recording an expense, and adding lines to a draft order. Those you use every \""," + \"day — no extra click.\","," dialogsSteppers:"," \"Whole-number counts — egg counts, bird counts, sale quantities, eggs per unit — have thumb-sized \""," + \"− and + buttons: tap for one, hold to speed up. \""," + \"A sale line's quantity never steps below 1, and it is always a whole number — \""," + \"stepped or typed. Decimals belong in prices, which are typed.\","," dialogsConfirm:"," \"Actions that cannot be undone ask first. Submitting a day, confirming or cancelling \""," + \"an order, depleting or archiving a flock — each one says what is about to happen and waits. The \""," + \"keyboard starts on Cancel, so pressing Enter by habit never goes through with it. A \""," + \"red button means the action undoes or retires something: voiding, cancelling a \""," + \"draft, depleting, archiving. Submitting a day and confirming an order cannot be taken back either, \""," + \"but they are the normal way through the week.\","," dialogsVoidReason:"," \"Voids need a reason. Voiding a daily entry, a payment, or a confirmed order asks the \""," + \"same way but wants a written reason first — it is stored with the void and shown wherever that \""," + \"record turns up afterwards, so write what actually happened. Leave it empty and the popup says so on \""," + \"the spot, keeping whatever you typed.\","," // Daily entry"," dailyEntryHeading: \"Daily entry\","," dailyEntryPanes:"," \"Pick the flock and date at the top, then work through two panes side by side: 1 Egg \""," + \"counts (total, cracked, dirty, discarded, deaths) and 2 Grading. The counts \""," + \"produce a sellable figure, and that is the number the grades have to add up to. A \""," + \"draft can leave that partly done, or not started at all — submitting needs it exact.\","," dailyEntryGradingDown:"," \"Grading counts down. Beside the grades is how many sellable eggs you still have to \""," + \"place; it turns green the moment the day adds up and red if you go over — going over blocks saving \""," + \"the draft too, not just Submit. You cannot submit until it reads exactly zero — grading a day \""," + \"partway, or not at all, is fine for a draft but not for Submit.\","," dailyEntryButtons:"," \"Every count has − and + buttons. Tap for one, or hold \""," + \"— it speeds up as you go, so a few hundred eggs takes about a second. Easier than a keypad with \""," + \"gloves on. A grade's + no longer stops at the day's current total — count the \""," + \"grades first and the total catches up to match. It only ever raises the total, never lowers it, so \""," + \"trimming the total on step 1 never pushes a grade back down. Farms that count by the tray can make \""," + \"each tap count a whole pack unit instead of one egg — the farm default lives in \""," + \"Settings, and each person can pick their own on their Account \""," + \"screen. When a pack unit is in force the buttons say so themselves (−30 / +30) and \""," + \"a note above the panes names the unit; typing still enters exact numbers.\","," dailyEntryPutAllIn:"," \"Most days end the same way — one grade takes whatever is left. Put all in… beside the \""," + \"remaining count does it in one move: drag it onto a grade, or tap it and pick one.\","," dailyEntrySaveBar:"," \"Both save buttons stay in a bar at the bottom of the screen as you scroll. On a phone that bar also \""," + \"shows the sellable count and how many are left, so you never lose sight of whether the day adds up.\","," dailyEntrySaveSubmit:"," \"Save draft keeps the day editable. Submit makes it official: it \""," + \"creates the day's egg lots and records deaths in the flock's bird ledger. Workers can no longer edit \""," + \"it — an admin can adjust or void it (see \\\"Fixing mistakes\\\").\","," dailyEntryLocking:"," \"Submitted entries lock automatically after 7 days. Locked only means the correction \""," + \"window for routine fixes has passed — admin adjust/void still works on locked entries.\","," dailyEntryToday:"," \"\\\"Today\\\" means your farm's today, not the clock in some other part of the world. You \""," + \"can record any day up to and including it; a day that has not happened yet on the farm is refused — \""," + \"here and everywhere else you enter a date: feed and water use, feed purchases and stock corrections, \""," + \"expenses, payments, and a flock's placement date. The same date decides when eggs come out of a \""," + \"withdrawal period, which eggs a sale can take, the day a flock is depleted or archived on, and the \""," + \"range reports open on — so nothing disagrees about what day it is.\","," dailyEntryOnePerDay:"," \"One entry per flock per day. Reopening a day that has a draft loads it for editing and shows an \""," + \"Editing draft badge beside the title, so picking up saved work never looks like \""," + \"starting fresh. If prefill fails, saving is blocked until it succeeds so an existing draft is never \""," + \"silently overwritten.\","," dailyEntryDepletedBackfill:"," \"Depleted flocks accept backfilled entries up to their depletion date; archived flocks accept none.\","," // Flocks & birds"," flocksHeading: \"Flocks & birds\","," flocksCurrentBirds:"," \"A flock's current birds = its starting count minus everything in its bird \""," + \"ledger: deaths (added automatically when entries are submitted), culls \""," + \"(birds deliberately removed — sold, slaughtered, given away), and manual adjustments \""," + \"(count corrections, either direction).\","," flocksLifecycle:"," \"Lifecycle: Active (normal) → Depleted (birds gone; history stays, \""," + \"backfill allowed) → Archived (hidden from daily work). Depleting and archiving ask \""," + \"for confirmation; both are reversible with Reactivate.\","," flocksPermissions:"," \"Anyone can create a flock and view the bird ledger. Editing a flock, lifecycle changes, and recording \""," + \"culls/adjustments are admin-only.\","," // Egg grades"," gradesHeading: \"Egg grades\","," gradesBuckets:"," \"Grades are your farm's grading buckets — sizes (Large…), qualities (Cracked…), or custom. Only \""," + \"saleable grades appear in entry capture and on orders; non-saleable buckets are \""," + \"bookkeeping.\","," gradesDeactivating:"," \"Grades are never deleted. Deactivating removes a grade from capture and order \""," + \"pickers: its stock stays counted and order lines added earlier can still confirm, but it can't be \""," + \"put on new order lines — reactivate the grade to sell remaining stock. History keeps \""," + \"showing its name.\","," gradesAdminOnly: \"The grade catalog is configuration — managing it is admin-only.\","," // Products"," productsHeading: \"Products (admin)\","," productsWhatYouSell:"," \"Products are what you sell — \\\"Large Eggs by the dozen\\\", \\\"Mixed carton\\\". Each egg product points \""," + \"at an egg grade (that's where its stock comes from) and carries a selling unit and an optional \""," + \"default price. Only egg products exist for now.\","," productsPackedUnits:"," \"Packed units set how many eggs each unit holds — your carton might be 12, 18, or 30. \""," + \"Changing a unit only affects future sales; past orders keep the count they were sold with.\","," // Stock"," stockHeading: \"Stock\","," stockLots:"," \"Every grade expands into its lots (one per submitted day), and every lot into its \""," + \"movement ledger — an explicit line for each production, sale, correction, or void. \""," + \"The running sum always equals the balance shown; nothing changes stock without leaving a line. \""," + \"The lot list shows the newest 50 at a time — narrow it with the From/To dates \""," + \"to reach an older lot, or keep loading more.\","," stockRestricted:"," \"Stock is the sum of your egg lots per grade. The restricted column is reserved for \""," + \"medication withholding periods — that feature arrives with medication tracking. Nothing \""," + \"marks eggs restricted yet, so the system does not enforce withdrawal times today — manage \""," + \"withholding periods outside Cluckwork for now.\","," stockFifo: \"Selling always takes the oldest lots first, so stock naturally rotates.\","," stockWriteOff:"," \"Lost stock — breakage, spoilage, eggs used by the household — is recorded with write off \""," + \"on the lot (Owner/Manager, reason required). It lowers the lot's available count without touching the \""," + \"day's production figures; a recount can also add eggs back, up to what was previously written off. If \""," + \"the recount says the day's laying was wrong, adjust the daily entry instead.\","," // Feed & inventory"," inventoryHeading: \"Feed & inventory\","," inventoryItems:"," \"Items define what you track (feed, supplements…) and the unit it's measured in. The \""," + \"unit locks once stock has been received — quantities on record must keep meaning what they meant.\","," inventoryPurchaseUsage:"," \"Record purchase books received stock as a dated lot with its cost. Feeding a flock \""," + \"is recorded on the Feed page — a feedable item's panel links straight there with \""," + \"the item preselected.\","," inventoryLedger:"," \"Every change lands in the item's movement ledger — purchases, usage, corrections. \""," + \"Ledger rows are never edited or deleted.\","," inventoryCorrections:"," \"Typos and spoilage are fixed with corrections: an Adjustment (either \""," + \"direction) or a Discard (write-off) against a specific lot, always with a reason. The \""," + \"original row and the correction both stay visible.\","," inventoryPermissions:"," \"Recording purchases and usage is open to everyone; the item catalog and stock corrections are \""," + \"admin-only.\","," // Feed (#446 — its own page, out of the Inventory drill-down)"," feedHeading: \"Feed\","," feedRecording:"," \"Record feed logs what a flock ate on a day: pick the flock, the item (current \""," + \"stock shows right in the picker), the amount, and the date. Stock drains from the oldest \""," + \"purchases first — only lots that existed on that date — and the cost estimate comes from the \""," + \"actual lots consumed. The page's history lists every feeding with its estimated cost.\","," feedCorrecting:"," \"Feed records are never edited: the stock they drew is already in the ledger, so a \""," + \"mis-entry is fixed with an Inventory adjustment on the affected lot (reason \""," + \"required), which stays visible beside the original.\","," feedDailyEntry:"," \"The Daily Entry page shows the selected flock and day's feed and water at a \""," + \"glance, linking here. A feed or water record made while that day's entry already exists also \""," + \"remembers that entry — records made before it stay unlinked on purpose; the day itself is what \""," + \"ties them together.\","," // Water"," waterHeading: \"Water\","," waterRecording:"," \"Record what each flock drank per day: either a direct amount (liters or gallons) or meter \""," + \"readings — the amount is then the meter delta (end − start).\","," waterCorrecting:"," \"Water records have no stock behind them, so mistakes are fixed by correcting the record \""," + \"directly (the \\\"correct\\\" button, admin-only) — no compensating entries. The flock and date \""," + \"are fixed: picked wrong, record it again under the right one.\","," waterLifecycle:"," \"Same lifecycle rule as everywhere: depleted flocks accept backfill up to their depletion date, \""," + \"archived flocks accept nothing.\","," // Customers & sales"," salesHeading: \"Customers & sales\","," salesDrafts:"," \"Orders start as drafts: add lines by picking a product, a packed \""," + \"unit (dozen, carton, …), a whole-number quantity, and a price per unit (prefilled from the \""," + \"product's default, decimals allowed) — edit freely, or cancel (the draft is kept, \""," + \"read-only). The quantity counts units, not eggs — the field is labeled with the \""," + \"unit and shows the resulting egg count while you type (2 trays = 60 eggs, not 60 trays). Each \""," + \"line remembers how many eggs its unit held when it was added, so redefining a carton later never \""," + \"changes old orders.\","," salesConfirming:"," \"Confirming an order allocates real stock — oldest lots first — and is the point \""," + \"where inventory changes hands.\","," salesVoiding:"," \"A mistaken confirm is undone with Void (admin-only, reason required): the eggs go \""," + \"back to the exact lots they came from, and the order stays listed as Voided. Voiding is for \""," + \"mistakes, not for returns of delivered goods. (Orders confirmed before lot-level allocation tracking \""," + \"existed can't self-serve void — ask your administrator.)\","," salesPayments:"," \"Payments (Sales, Manager, or admin — voiding a payment is admin/manager only): a \""," + \"confirmed order's panel shows its settlement history — record partial payments (date, amount, \""," + \"method, optional reference) until the outstanding amount reaches zero; overpaying is refused. A \""," + \"wrong payment is voided (reason required) and the outstanding grows back. An order \""," + \"with payments can't be voided until its payments are voided first. The Customers page shows each \""," + \"customer's outstanding balance.\","," // Reports"," reportsHeading: \"Reports\","," reportsProduction:"," \"Production (everyone): pick a date range — per-day eggs, losses, sellable, \""," + \"condition, deaths, and hen-day % (eggs collected ÷ birds alive that day × 100), \""," + \"with period totals and a by-grade breakdown. Draft and voided entries don't count.\","," // #396 — the new column needs explaining because two of its neighbours look"," // like they should already cover it: Losses shows the same cracked/dirty"," // numbers (as counts, whether sold or not), and Sellable is the graded"," // figure that deliberately excludes them."," reportsCondition:"," \"Condition: cracked and dirty eggs that became stock instead of being written off. \""," + \"They are counted in Egg counts, never graded by hand, so they are not part of \""," + \"Sellable — add the two together for everything the day produced that you can \""," + \"sell. A day shows 0 here if you have those grades switched off in Settings, and days recorded \""," + \"before you switched them on keep showing 0 — turning a grade on never rewrites a past day.\","," reportsMoney:"," \"Money (admin): sales summary for the range's orders (revenue / paid / outstanding), \""," + \"expenses by category, and basic profit — confirmed revenue minus recorded expenses, \""," + \"no cost-of-goods.\","," reportsThrottle:"," \"If a report is refused: the farm runs only a few reports at a time, so one \""," + \"busy screen cannot slow the app for everyone else. Asking for several at once — a few people \""," + \"opening Reports together, or repeated retries — can come back as try again shortly \""," + \"instead of a table. Nothing was recorded and nothing was lost: press retry \""," + \"on the Reports screen a moment later and it re-runs with the same dates you picked.\","," // Expenses"," expensesHeading: \"Expenses (admin)\","," expensesRecording:"," \"Record money going out: date, category, description, and amount (in the farm's currency), optionally \""," + \"tied to a flock. The month picker shows a running total; categories are managed on the same screen \""," + \"(deactivating one hides it from new expenses — recorded ones keep it).\","," expensesCorrections:"," \"Corrections edit the expense in place (correct on the row). If someone else \""," + \"corrected it first, the form reloads their values and asks you to re-apply. The currency an expense \""," + \"was recorded in never changes.\","," expensesAdminOnly:"," \"Expenses are money data, so the whole screen — viewing included — is admin-only, unlike the \""," + \"production screens where workers record.\","," // History"," historyHeading: \"History\","," historyBrowse:"," \"Browse recorded daily entries newest-first, filtered by flock and date range. The status column shows \""," + \"the entry's life: Draft, Submitted, Locked (7+ days old), Adjusted (hover for the reason), or \""," + \"Voided.\","," historyAdminActions:"," \"Admins correct from here: adjust reopens the entry in the same two-step form as \""," + \"Daily entry — same sellable count, same grading chip, same put all in… shortcut \""," + \"— with a reason required; void undoes the whole entry. Stock and the bird ledger \""," + \"follow automatically.\","," historyDraftEdit:"," \"Draft rows have an edit link (everyone, not just admins) that jumps back to the \""," + \"Daily entry screen with that flock and day loaded — drafts are edited there, not adjusted.\","," // Audit log"," auditHeading: \"Audit log (admin)\","," auditLog:"," \"Every corrective, destructive, or configuration change lands in the audit log automatically: who did \""," + \"it, when (UTC), what it touched, and the reason where one was given. Written together with the \""," + \"change itself — a failed action leaves no trace, a successful one always does — and never editable, \""," + \"by anyone.\","," auditRecordTypeFilter:"," \"The Audit log's \\\"Record type\\\" dropdown does not filter the rows itself — it narrows the \""," + \"\\\"Action\\\" dropdown next to it down to only the actions that happen on the type you pick \""," + \"(Flock, Sales order, and so on), so you are not scanning one long list of every action the \""," + \"farm can log. Pick the action from that narrowed list to actually filter the rows.\","," auditRecordHistory:"," \"Flocks, Egg grades, Daily entry history, Sales and Expenses each carry a History column showing who \""," + \"created the record and when, plus who last changed it if anyone has. It is read from the same audit \""," + \"log, so it needs no extra permission: if you can see the record, you can see its history.\","," auditRecordHistoryLink:"," \"That column is a summary, not the whole story. Flocks, Egg grades, Daily entry history, Sales orders, \""," + \"and Expenses each carry an \\\"Audit history\\\" link on their own screen that opens the full trail for \""," + \"that one record — every corrective or configuration change, not just the creation and the most \""," + \"recent one — without hunting through the global Audit log above and filtering it yourself. Egg lots \""," + \"carry a similar \\\"Adjustment history\\\" link instead — narrower on purpose: only manual write-offs \""," + \"and recounts are recorded against a lot itself, so this shows those, not the lot's full story.\","," auditRecordHistorySubmit:"," \"Saving a daily entry and submitting it is one act, not a change: do both yourself and the History \""," + \"column names you as the creator with no change against you. If somebody else submits your draft, \""," + \"their submit shows as the last change, so you can always see who made a day's numbers official. \""," + \"Either way the History column tells you WHEN it was submitted, since that is when the eggs \""," + \"entered stock. Confirming a sales order works the same way, and shows when stock was allocated. \""," + \"Correcting an entry after it is locked always shows, \""," + \"even if you created it, and so does cancelling your own draft order. Editing your own draft before \""," + \"submitting it stays hidden — that is just writing it. But if somebody else edits your draft, their \""," + \"change is shown, so the person whose numbers went into stock is never invisible. And once they \""," + \"have, your own later edits are shown too: if you put the numbers back the way you wanted them, \""," + \"the column names you and the time you did it, not the edit you overwrote.\","," auditRecordHistoryOlder:"," \"Records created before this was added show no \\\"created by\\\" line — there is simply no creation \""," + \"entry in the log for them, and none is invented after the fact. If such a record has been changed \""," + \"since, that change still shows; the History column is empty only when there is nothing at all.\","," // Export & backup"," exportHeading: \"Export & backup (admin)\","," exportCsv:"," \"The Export screen downloads your data as CSV files you can open in any spreadsheet — one dataset at a \""," + \"time, or everything at once as a zip (the full backup, with a manifest of row \""," + \"counts). Keep a copy somewhere safe on your own schedule; automatic scheduled backups come in a \""," + \"later phase.\","," exportFormats:"," \"Money columns hold minor units (cents) plus the currency — exact values, not display formatting. \""," + \"Dates are ISO (YYYY-MM-DD), and timestamps are UTC.\","," // Farm settings"," farmSettingsHeading: \"Farm settings (admin)\","," farmSettingsIntro:"," \"Setup → Farm settings holds the farm's name and the four things that decide how \""," + \"everything reads: timezone, locale, currency and \""," + \"unit system. First day of week and the date and time formats are optional — leave \""," + \"them blank and the locale decides. The timezone takes effect everywhere the moment it is saved; the \""," + \"rest are recorded against the farm and will drive how amounts, dates and measurements are displayed \""," + \"once that formatting lands.\","," farmSettingsTimezone:"," \"The timezone is the farm's day. Every field that records when something \""," + \"happened — daily entry, flocks, water, feed usage and purchases, expenses, orders and payments \""," + \"— opens on it and refuses to go past it, whatever day the phone or laptop in your hand is on, so a \""," + \"device travelling ahead of the farm can no longer offer a date the save then refuses. Dates that are \""," + \"meant to be in the future are not capped: a feed batch's expiry, and the date \""," + \"ranges you filter History and Water by.\","," farmSettingsCurrency:"," \"The currency locks the moment the farm records its first amount — a sale, a payment, \""," + \"an expense, a priced product, or money spent on feed. The field shows as locked with the reason \""," + \"rather than letting you type a code that would be refused. Nothing already recorded is ever \""," + \"re-priced, which is exactly why it locks.\","," farmSettingsLogo:"," \"The logo replaces the Cluckwork mark in the sidebar for everyone at the farm. PNG, \""," + \"JPEG or WebP, up to the size limit shown on the screen (2 MB by default) and 4096 pixels a side. \""," + \"Animated images are refused rather than flattened. What gets stored is a rebuilt copy: camera and \""," + \"location details are stripped out on the way in — a photo taken on a phone carries where it was \""," + \"taken, and for a farm that is its address. Remove it and the sidebar goes back to the Cluckwork mark.\","," // #452 — the preset dropdown + Custom escape hatch for date/time format"," // overrides, replacing what used to be a bare free-text field."," farmSettingsDateTimeFormat:"," \"Date format and time format offer a few common choices in a \""," + \"dropdown — pick one and you are done. Need something not listed? Choose \""," + \"Custom… to type your own; the presets are all safe choices, but a custom value \""," + \"is only checked well enough to save, not to prove it looks right — nothing in Cluckwork displays \""," + \"dates or times through this setting yet, so a broken custom value would not be visible today.\","," farmSettingsSquareLogo:"," \"The logo shows in the sidebar at about the height of a line of text. A simple, tightly-cropped mark \""," + \"and a wide wordmark both read fine there — a wordmark keeps its own shape and uses \""," + \"the horizontal space rather than being squashed into a square. What does not work at that size is a \""," + \"detailed picture or a busy scene: it shrinks to something unreadable. Give a detailed image to the \""," + \"farm banner instead, where it is shown full-size.\","," farmSettingsBanner:"," \"The banner is a second, independent image shown full-size on a splash screen right \""," + \"after signing in, once per sign-in — a wide or detailed picture works well here, unlike the small \""," + \"sidebar logo above. It has its own size limit (5 MB by default) and its own presence: a farm can \""," + \"have a logo, a banner, both, or neither. If none is set, the splash is skipped entirely.\","," farmSettingsCountingUnit:"," \"Daily Entry counting unit sets how much the entry screen's +/− buttons count by for \""," + \"everyone on the farm — one egg, or a pack unit like Tray (30 per tap). Only units with an active \""," + \"eggs-per-unit definition on the Products screen can be picked, and each person can override it for \""," + \"themselves on their Account screen.\","," // Farm palette"," farmPaletteHeading: \"Farm palette\","," farmPaletteIntro:"," \"Farm settings lets an admin pick the accent colour used across the app for everyone on the farm: \""," + \"Aubergine, Forest, Slate or Terracotta. The choice applies when you save, and everyone sees it the \""," + \"next time their app loads.\","," farmPaletteLightNight:"," \"Light and night mode are separate and personal. Each person picks their own with the toggle in the \""," + \"sidebar, on each device, and the farm palette never overrides it — every palette is designed to work \""," + \"in both.\","," // Account (#444) — the personal counterpart to Farm settings."," accountHeading: \"Your account\","," accountPassword:"," \"Change password needs your current one and signs your other devices out — every \""," + \"role can do this for themselves.\","," accountLanguage:"," \"Language switches the interface just for you, immediately, on every device you \""," + \"sign into.\","," accountCountingUnit:"," \"Daily Entry counting unit — how much YOUR +/− taps count by, overriding the farm \""," + \"default from Settings. Pick a pack unit like Tray to count by the tray, or follow the farm \""," + \"default so a later farm-wide change follows you automatically.\","," // Install on a phone"," installHeading: \"Install on a phone\","," installIntro:"," \"Cluckwork can be added to a phone or tablet's home screen, where it gets its own icon and opens in \""," + \"its own window without the browser bars — more room for the entry screens and quicker to reach in \""," + \"the shed. It's the same app, not a separate download, so there is nothing to update from an app \""," + \"store.\","," installSteps:"," \"Android (Chrome): open the menu and choose Install app or \""," + \"Add to Home screen. iPhone/iPad (Safari): tap Share, \""," + \"then Add to Home Screen.\","," installHttps:"," \"Installing is only offered over a secure (https) address. If your farm reaches \""," + \"Cluckwork on a plain http one the option simply won't appear — nothing is broken, \""," + \"and the app works exactly as it does in the browser.\","," installOffline:"," \"Installing does not make the app work offline. It still needs a connection to load \""," + \"and save; only the app's own screens are kept on the device so it starts quickly. Recording while \""," + \"offline is planned work, not something installing turns on.\","," installNewVersion:"," \"When a new version is released you'll see \\\"A new version of Cluckwork is ready\\\". \""," + \"It waits for you rather than reloading while you're typing — press Reload when \""," + \"you're at a good moment, or Later and it will ask again next time. Nothing is lost \""," + \"by leaving it.\","," // Fixing mistakes (table cells are prose, part of 6a)"," mistakesHeading: \"Fixing mistakes\","," mistakesIntro:"," \"Every fix in this table needs an admin sign-in (see \\\"Who can do what\\\") — workers record, admins \""," + \"correct. The one exception: a draft is still recording, not correcting, so workers edit \""," + \"their own drafts.\","," mistakesTableMistakeHeader: \"Mistake\","," mistakesTableFixHeader: \"Fix\","," mistakesRow1Mistake: \"Depleted or archived the wrong flock\","," mistakesRow1Fix: \"Flocks → Reactivate (fully reversible)\","," mistakesRow2Mistake: \"Wrong bird count\","," mistakesRow2Fix: \"Flocks → bird ledger → Adjustment (either direction)\","," mistakesRow3Mistake: \"Confirmed the wrong sales order\","," mistakesRow3Fix:"," \"Sales → open the order → Void order (stock returns to its lots; reason required). \""," + \"If payments were recorded on it, void those first.\","," mistakesRow4Mistake: \"Recorded a wrong payment\","," mistakesRow4Fix:"," \"Sales → open the order → payments → void (reason required): the row is kept and the \""," + \"outstanding amount grows back.\","," mistakesRow5Mistake: \"Wrong quantity in a feed purchase / spoiled feed\","," mistakesRow5Fix:"," \"Inventory → open the item → Correct stock (Adjustment or Discard against the lot; \""," + \"reason required). Only quantities are correctable — a wrong cost, date, or lot number can't be \""," + \"fixed yet, so double-check those before saving.\","," mistakesRow6Mistake: \"Over- or under-recorded feed usage\","," mistakesRow6Fix:"," \"Same correction form: a positive Adjustment returns over-used stock to the lot (up to what it \""," + \"received); a negative one removes under-recorded stock. The usage record itself and its cost \""," + \"estimate stay as recorded — corrections fix the stock, not the history.\","," mistakesRow7Mistake: \"Wrong water record\","," mistakesRow7Fix:"," \"Water → correct on the record — amounts, source, meters, and note edit in place (no \""," + \"stock behind water). Flock and date are fixed: picked wrong, record it again under the right one.\","," mistakesRow8Mistake: \"Wrong numbers in a submitted daily entry\","," mistakesRow8Fix:"," \"History → adjust (admin) — totals, losses, mortality, and grade split, with a \""," + \"required reason. The corrected grades must add up to the corrected sellable count exactly, the same \""," + \"rule Submit uses, and Save adjustment is blocked until they do. Stock and the bird \""," + \"ledger update to match automatically, but eggs already sold can never be un-counted: shrinking a \""," + \"grade below what was sold is refused. The previous values stay visible on the entry.\","," mistakesRow9Mistake: \"Entire submitted entry is wrong (wrong flock or day)\","," mistakesRow9Fix:"," \"History → void (admin, reason required): its egg lots empty, its deaths are \""," + \"reversed in the bird ledger, and the entry is kept as Voided. Refused if any of its eggs were \""," + \"already sold — void the sale first. Voiding frees the day: the correct entry can then be recorded \""," + \"for the same flock and date.\","," mistakesRow10Mistake: \"Mistake in a draft entry or order\","," mistakesRow10Fix:"," \"Edit it — draft numbers, grade lines, and order lines are all editable (draft entries: History → \""," + \"edit jumps to the Daily entry screen with the day loaded). The flock/date of an \""," + \"entry and the customer/date of an order are fixed, though: picked wrong, just record it again under \""," + \"the right one (and cancel the wrong draft order).\","," // Glossary (Task 33, B6b, #182): the 37-row term/definition table plus"," // its closing repo-note paragraph. Externalized byte-faithful from the"," // prior hardcoded English — see the Task 33 brief's alignment note:"," // specs/product/GLOSSARY.md is the canonical 96-term termbase (Task 34"," // reconciles it separately) and this in-app table is a curated subset,"," // so its English wording is intentionally NOT rewritten here. HTML"," // entities in the old JSX ('/") are real apostrophe/quote"," // characters below — same rendered text, just no entity escaping needed"," // inside a JS string. -only rows: glossaryInstallToHomeScreenDef"," // (one ) and glossaryRepoNote (one , whose"," // \"specs/product/GLOSSARY.md\" path text is literal — the closing note's"," // renders it via the components map, not a translated string)."," glossaryHeading: \"Glossary\","," glossaryNavigationTerm: \"Navigation\","," glossaryNavigationDef:"," \"Screens live in the left sidebar on a computer; on a phone the four you use most are tabs across \""," + \"the bottom, the rest under More.\","," glossaryOperationalDayTerm: \"Operational day\","," glossaryOperationalDayDef:"," \"Dates mean your farm's calendar day, worked out from the farm's own timezone rather than a clock \""," + \"somewhere else. It is the same \\\"today\\\" everywhere: what counts as a future date when you record \""," + \"work, when eggs leave a withdrawal period, which eggs a sale can take, the day a flock is depleted \""," + \"or archived on, and the range reports open on. Every field that records WHEN SOMETHING HAPPENED \""," + \"opens on it and will not go past it, whatever day the device in your hand is on. Dates meant to \""," + \"fall in the future are not capped — a feed batch's expiry, and the History and Water filters.\","," glossaryInstallToHomeScreenTerm: \"Install to home screen\","," glossaryInstallToHomeScreenDef:"," \"Adding Cluckwork to a phone or tablet's home screen from the browser, so it gets its own icon and \""," + \"opens in its own window without the browser bars. It is the same app, not a separate download — \""," + \"nothing to update from an app store. Only offered over a secure (https) address, and it does \""," + \"not make the app work offline: it still needs a connection to load and save.\","," glossaryNewVersionReadyTerm: \"A new version is ready\","," glossaryNewVersionReadyDef:"," \"After a release, an installed app notices the new version in the background and asks before \""," + \"switching, rather than reloading while you are typing. Press Reload when convenient, or Later and \""," + \"it asks again next time. Nothing is lost by leaving it — the running app keeps working until you \""," + \"accept.\","," glossaryTooManySignInAttemptsTerm: \"Too many sign-in attempts\","," glossaryTooManySignInAttemptsDef:"," \"Sign-in is rate limited to slow password guessing: too many attempts from one place in a few \""," + \"minutes are refused with this message until a short cool-off passes. It never affects an already \""," + \"signed-in session.\","," // #393 — same forced-reauth edge case as signingInMultiTabResync above,"," // now in the glossary table's own term/definition form."," glossaryForcedReauthTerm: \"Signed out right after switching accounts\","," glossaryForcedReauthDef:"," \"Signing in as someone else in one browser tab while another tab is midway through \""," + \"its own quiet background check can occasionally sign the new session back out again immediately. \""," + \"Just sign in again — this only happens in that narrow multi-tab moment and nothing already saved \""," + \"is lost.\","," glossaryTooManyReportsTerm: \"Too many reports at once\","," glossaryTooManyReportsDef:"," \"The farm runs only a few reports at the same time, so one busy screen cannot slow the app for \""," + \"everyone. Over that, a report comes back asking you to try again shortly instead of waiting in \""," + \"line. Nothing is recorded or lost — press retry on the Reports screen a moment later; it \""," + \"re-runs with the same dates you picked. Each farm has its own allowance, so \""," + \"another farm's reports never use up yours.\","," // #308"," glossaryStepUpAuthTerm: \"Step-up authentication\","," glossaryStepUpAuthDef:"," \"An extra check on top of being signed in: before creating another Owner, resetting an existing \""," + \"Owner's password, promoting someone to Owner, or disabling or re-enabling any user, the Users \""," + \"screen asks you to re-enter your current password right there in the dialog. It confirms it's \""," + \"really you before handing out — or taking away — that much access. Disabling and re-enabling ask \""," + \"every time, regardless of the target's role; the other three ask only when Owner access is involved.\","," glossarySomethingWentWrongScreenTerm: \"\\\"Something went wrong\\\" screen\","," glossarySomethingWentWrongScreenDef:"," \"What a screen shows when it hits an error, instead of going blank. Saved data is safe — anything \""," + \"you were still typing may need re-entering; tap Reload or Back to the dashboard. \\\"Error \""," + \"details\\\" holds the message for a screenshot.\","," glossaryDailyEntryTerm: \"Daily entry\","," glossaryDailyEntryDef: \"One flock's day: eggs by grade, losses, deaths. Grading past the total raises it to match. Draft until submitted.\","," glossaryEggLotTerm: \"Egg lot\","," glossaryEggLotDef:"," \"A dated batch of sellable eggs of one grade, created by submitting an entry. Stock is the sum of \""," + \"lots.\","," glossaryGradeTerm: \"Grade\","," glossaryGradeDef: \"A grading bucket (size, quality, or custom). Saleable grades can be sold.\","," glossaryEggMovementLedgerTerm: \"Egg movement ledger\","," glossaryEggMovementLedgerDef:"," \"The line-by-line history behind an egg lot's balance: production in, sales out, corrections and \""," + \"voids signed accordingly.\","," glossaryStockWriteOffTerm: \"Stock write-off\","," glossaryStockWriteOffDef:"," \"An Owner/Manager correction that removes lost eggs from a lot (breakage, spoilage, internal use) or \""," + \"applies a recount, with a required reason. It changes only the lot's available count — the day's \""," + \"production figures stay untouched. A recount can add eggs back up to what was previously written off.\","," glossaryFifoTerm: \"FIFO\","," glossaryFifoDef: \"\\\"First in, first out\\\" — sales and feed usage always take the oldest stock first.\","," glossaryCullTerm: \"Cull\","," glossaryCullDef: \"Birds deliberately removed from a flock (sold, slaughtered, given away) — not deaths.\","," glossaryMortalityTerm: \"Mortality\","," glossaryMortalityDef: \"Deaths, recorded on the daily entry; lands in the bird ledger automatically at submit.\","," glossaryDepleteTerm: \"Deplete\","," glossaryDepleteDef: \"Mark a flock as having no birds left. History stays; reversible via Reactivate.\","," glossaryArchiveTerm: \"Archive\","," glossaryArchiveDef: \"Hide a finished flock from daily work. Reversible via Reactivate.\","," glossaryWithdrawalRestrictionTerm: \"Withdrawal restriction\","," glossaryWithdrawalRestrictionDef:"," \"A hold on eggs during a medication withholding period. Coming with medication tracking — nothing \""," + \"sets restrictions yet, so manage withholding periods outside Cluckwork for now.\","," glossaryProductTerm: \"Product\","," glossaryProductDef:"," \"What you sell — an egg product points at a grade (its stock source) and carries a selling unit and \""," + \"default price.\","," glossaryPackedUnitTerm: \"Packed unit\","," glossaryPackedUnitDef:"," \"How many eggs a dozen/tray/carton/case holds on your farm. Each sale line keeps the count it was \""," glossaryCountingUnitTerm: \"Counting unit\","," glossaryCountingUnitDef:"," \"How much each tap of the Daily Entry − / + buttons counts — one egg, or a packed unit like a tray. \""," + \"Farm default in Settings; your own pick on your Account screen. The buttons show the amount \""," + \"(−30 / +30) when it isn't one.\","," glossarySalesLineTerm: \"Sales line\","," glossarySalesLineDef:"," \"One product on an order: a whole-number quantity in selling units, priced per unit (the price may \""," + \"have decimals); the eggs behind it are quantity × the unit's egg count.\","," glossaryConfirmOrderTerm: \"Confirm (order)\","," glossaryConfirmOrderDef: \"Turns a draft order into a real sale and allocates stock. Undone only by voiding.\","," glossaryVoidOrderTerm: \"Void (order)\","," glossaryVoidOrderDef:"," \"Undo of a mistaken confirm — stock returns to the exact lots it came from. Needs a reason.\","," glossaryCancelOrderTerm: \"Cancel (order)\","," glossaryCancelOrderDef: \"Close a draft that never happened. No stock involved.\","," glossaryInventoryItemTerm: \"Inventory item\","," glossaryInventoryItemDef:"," \"A catalog entry for something you stock (feed, supplements…), with a fixed unit of measure.\","," glossaryInventoryLotTerm: \"Inventory lot\","," glossaryInventoryLotDef: \"One received batch of an item, with its own cost. On-hand = sum of lots.\","," glossaryInventoryMovementLedgerTerm: \"Inventory movement ledger\","," glossaryInventoryMovementLedgerDef:"," \"The append-only trail of every feed/supply stock change. Corrections are new rows, never edits.\","," glossaryWaterUsageTerm: \"Water usage\","," glossaryWaterUsageDef:"," \"What a flock drank on a day — direct amount or meter delta. Editable in place; flock/date fixed.\","," glossaryFeedUsageTerm: \"Feed usage\","," glossaryFeedUsageDef: \"What a flock ate on a day; drains lots FIFO and estimates cost from them.\","," glossaryAdjustmentDiscardTerm: \"Adjustment / Discard\","," glossaryAdjustmentDiscardDef:"," \"Stock corrections against a lot, reason required. Discard = write-off (spoilage).\","," glossaryRolesTerm: \"Roles\","," glossaryRolesDef:"," \"Admin (owner), Manager, Worker, Sales, Read-only — see \\\"Who can do what\\\". Workers record; \""," + \"managers also correct and configure; sales handles orders and payments; read-only just views.\","," glossaryLockedEntryTerm: \"Locked (entry)\","," glossaryLockedEntryDef:"," \"A submitted entry older than 7 days — closed to routine edits; admin adjust/void still works.\","," glossaryAdjustEntryTerm: \"Adjust (entry)\","," glossaryAdjustEntryDef:"," \"Admin correction of a submitted entry. The corrected grades must add up to the corrected sellable count \""," + \"exactly, the same rule Submit uses — an adjustment has no draft state to leave partly graded. Stock \""," + \"and bird ledger reconcile automatically; sold eggs are untouchable; previous values stay visible.\","," glossaryVoidEntryTerm: \"Void (entry)\","," glossaryVoidEntryDef:"," \"Admin undo of a whole submitted entry — lots empty, deaths reverse, entry preserved as Voided. \""," + \"Refused once its eggs are sold.\","," glossaryFarmSettingsTerm: \"Farm settings\","," glossaryFarmSettingsDef:"," \"The farm's name, timezone, locale, currency and unit system, plus optional first day of week and \""," + \"date/time formats — picked from a preset dropdown, or typed as a custom .NET format string. \""," + \"Setup → Farm settings; owners and managers edit, everyone reads — formatting money and dates is \""," + \"not a permission.\","," glossaryCurrencyLockTerm: \"Currency lock\","," glossaryCurrencyLockDef:"," \"The farm currency stops being editable once anything has recorded an amount in it — a sale, a \""," + \"payment, an expense, a priced product, money spent on feed. The field shows locked with the \""," + \"reason. Nothing already recorded is ever re-priced, which is the whole point.\","," glossaryFarmLogoTerm: \"Farm logo\","," glossaryFarmLogoDef:"," \"Your own image in place of the Cluckwork mark in the sidebar, uploaded from Farm settings. PNG, \""," + \"JPEG or WebP (2 MB by default), still images only; a simple mark or a wide wordmark reads best at \""," + \"that size, while a detailed picture belongs on the farm banner. Stored as a rebuilt copy with \""," + \"camera and location details stripped out.\","," glossaryFarmBannerTerm: \"Farm banner\","," glossaryFarmBannerDef:"," \"A second, independent image shown full-size on a splash screen right after signing in, once per \""," + \"sign-in. Separate from the farm logo above — a farm can have a logo, a banner, both, or neither. \""," + \"Same PNG/JPEG/WebP still-image rules, its own larger size limit (5 MB by default), uploaded from \""," + \"Farm settings.\","," glossaryFarmPaletteTerm: \"Farm palette\","," glossaryFarmPaletteDef:"," \"The farm-wide accent colour, chosen by an admin in Farm settings. Separate from each person's own \""," + \"light/night mode setting.\","," glossaryUiLanguageTerm: \"UI language\","," glossaryUiLanguageDef:"," \"The per-user language the interface is shown in — English, Español, or Tagalog — chosen from \""," + \"Account → Preferences. English is the fallback for any screen not yet translated, whatever \""," + \"language you picked.\","," // #356 — appended last so it doesn't reshuffle the rows above."," glossaryDisabledUserTerm: \"Disabled user\","," glossaryDisabledUserDef:"," \"Revoked access, not deletion. A disabled user can't sign in, refresh, or get a step-up grant, and \""," + \"every session they had open ends on its very next request. Re-enabling restores sign-in but not \""," + \"those old sessions — anything issued before the disable never works again. The account's last \""," + \"active Admin (owner) can't be disabled, and nobody can disable themselves.\","," glossaryRepoNote:"," \"Full spec-language definitions live in the repository's specs/product/GLOSSARY.md.\",","} as const;","export type Resources = typeof en;","web/src/routes/HelpPage.tsx",[4475],{"_923":687,"_924":4476,"_422":4477,"_927":62},641,[4478,4479,202,4480,4481,4482,4483,4484,202,4485,4486,4487,4488,4489,4490,4491,4492,4493,4494,4495,4496,4497,4498,4499,4500,4501,4502,4503,4504,4505,4506,4507,4508,4509,4510,4511,4512,4513,4514,4515,4516,4517,4518,4519,202,4520,4521,4522,4523,4524,202,4525,4526,202,4527,4528,4529,4530,4531,4532,4533,4534,4535,4536,4537,4538,4539,4540,4541,4542,4543,4544,4545,4546,202,4547,4548,4549,4550,4551,4552,4553,202,4554,4555,4556,4557,4558,4559,4560,4561,4562,4563,4564,4565,4566,4567,4568,4569,4570,4571,202,4572,4573,4574,4575,4576,4577,4575,4578,4577,4575,4579,4577,4575,4580,4577,4581,202,4582,4574,4575,4583,4577,4575,4584,4577,4575,4585,4577,4575,4586,4577,4575,4587,4577,4575,4588,4577,4575,4589,4577,4575,4590,4577,4581,202,4591,4592,4593,202,4594,4591,4595,4593,4596,202,4597,4574,4575,4598,4577,4575,4599,4577,4575,4600,4577,4575,4601,4577,4575,4602,4603,4577,4581,202,4591,4604,4593,202,4605,4574,4575,4606,4577,4575,4607,4577,4575,4608,4577,4575,4609,4610,4611,4577,4575,4612,4613,4614,4577,4575,4615,4577,4575,4616,4617,4577,4575,4618,4577,4575,4619,4577,4581,202,4620,4574,4575,4621,4577,4575,4622,4577,4575,4623,4577,4575,4624,4577,4625,4575,4626,4577,4575,4627,4577,4575,4628,4577,4575,4629,4577,4630,4581,202,4631,4574,4575,4632,4577,4575,4633,4577,4634,4581,202,4635,4574,4575,4636,4577,4575,4637,4577,4638,4581,202,4639,4574,4640,4575,4641,4577,4581,202,4642,4574,4575,4643,4577,4575,4644,4577,4645,4575,4646,4577,4581,202,4647,4574,4575,4648,4577,4575,4649,4577,4575,4650,4577,4575,4651,4577,4652,4581,202,4653,4574,4575,4654,4577,4575,4655,4577,4575,4656,4577,4581,202,4657,4574,4575,4658,4577,4575,4659,4577,4660,4581,202,4661,4574,4575,4662,4577,4575,4663,4577,4575,4664,4577,4575,4665,4577,4581,202,4666,4574,4575,4667,4577,4575,4668,4577,4575,4669,4577,4575,4670,4577,4581,202,4671,4574,4672,4575,4673,4577,4674,4581,202,4675,4574,4676,4575,4677,4577,4575,4678,4577,4581,202,4679,4574,4680,4681,4682,4683,4684,4685,4581,202,4686,4574,4575,4687,4577,4688,4581,202,4689,4574,4575,4690,4577,4575,4691,4577,4575,4692,4577,4693,4575,4694,4577,4575,4695,4577,4575,4696,4577,4697,4575,4698,4577,4699,4575,4700,4577,4581,202,4701,4702,4703,202,4704,4705,4706,4574,4575,4707,4577,4575,4708,4577,4575,4709,4577,4581,202,4710,4574,4711,4575,4712,4577,4575,4713,4577,4575,4714,4577,4575,4715,4577,4581,202,4716,4717,4718,4593,4719,4720,4721,4722,4723,4724,4725,4726,4727,4724,4728,4729,4727,4724,4730,4731,4732,4733,4727,4724,4734,4731,4735,4733,4727,4724,4736,4731,4737,4733,4727,4724,4738,4739,4727,4724,4740,4731,4741,4733,4727,4724,4742,4731,4743,4733,4727,4724,4744,4731,4745,4733,4727,4724,4746,4731,4747,4733,4727,4748,4749,202,4750,4719,4723,4751,4752,4753,4754,4755,4756,4757,4758,4759,4760,4761,4762,4763,4764,4765,4766,4767,4768,4769,4770,4771,4772,4773,4774,4775,4776,4777,4778,4779,4780,4781,4782,4783,4784,4785,4786,4787,4788,4789,4790,4791,4792,4793,4794,4795,4796,4797,4798,4799,4800,4801,4802,4803,4804,4805,4806,4807,4808,4809,4810,4811,4812,4813,4814,4815,4816,4817,4818,4819,4820,4821,4822,4823,4824,4825,4826,4827,4828,4829,4830,4831,4832,4833,4724,4834,4835,4727,4836,4837,4838,4839,4840,4748,4749,202,4841,4842,4843,4844,4553,4845,4846,4847],"import { useEffect, useState } from \"react\";","import { Trans, useTranslation } from \"react-i18next\";","// F18 (#71): in-app user guide + glossary. #52 restyled it into a docs layout","// with a sticky contents rail that scroll-spies the section in view. KEEP THIS","// PAGE CURRENT: the docs-sync rule (AGENTS.md) requires every user-visible","// change to update the relevant section here and specs/product/GLOSSARY.md in","// the same PR.","// Must mirror the sections below, in document order — a section","// missing here is invisible to anyone who navigates by the contents list.","//","// Task 32 (B6a, #182): the label (2nd element) is now a `help` catalog key,","// not literal text — rendered via t(label) at render time. The `id` (1st","// element) stays byte-identical: it drives the anchors below AND","// the scroll-spy IntersectionObserver in the effect further down. Do NOT","// rename an id or reorder an entry — that would break both.","const TOC = ["," [\"getting-around\", \"tocGettingAround\"],"," [\"signing-in\", \"tocSigningIn\"],"," [\"daily-loop\", \"tocDailyLoop\"],"," [\"roles\", \"tocRoles\"],"," [\"dialogs\", \"tocDialogs\"],"," [\"daily-entry\", \"tocDailyEntry\"],"," [\"flocks\", \"tocFlocks\"],"," [\"grades\", \"tocGrades\"],"," [\"products\", \"tocProducts\"],"," [\"stock\", \"tocStock\"],"," [\"inventory\", \"tocInventory\"],"," [\"feed\", \"tocFeed\"],"," [\"water\", \"tocWater\"],"," [\"sales\", \"tocSales\"],"," [\"reports\", \"tocReports\"],"," [\"expenses\", \"tocExpenses\"],"," [\"history\", \"tocHistory\"],"," [\"audit\", \"tocAudit\"],"," [\"export\", \"tocExport\"],"," [\"farm-settings\", \"tocFarmSettings\"],"," [\"farm-palette\", \"tocFarmPalette\"],"," [\"account\", \"tocAccount\"],"," [\"install\", \"tocInstall\"],"," [\"mistakes\", \"tocMistakes\"],"," [\"glossary\", \"tocGlossary\"],","] as const;","export function HelpPage() {"," const { t } = useTranslation(\"help\");"," // The busy-button line (#236) reads the same `common` key as the"," // \"Working…\" announcement it explains, so the two can never drift."," const { t: tc } = useTranslation(\"common\");"," // Scroll-spy the contents rail: highlight the section currently in view."," const [activeId, setActiveId] = useState(TOC[0][0]);"," useEffect(() => {"," // jsdom (tests) has no IntersectionObserver — the rail still works as plain"," // anchors, it just doesn't auto-highlight there."," if (typeof IntersectionObserver === \"undefined\") return;"," const observer = new IntersectionObserver("," (entries) => {"," const inView = entries"," .filter((e) => e.isIntersecting)"," .sort((a, b) => a.boundingClientRect.top - b.boundingClientRect.top);"," if (inView[0]) setActiveId(inView[0].target.id);"," },"," // \"active\" once a heading reaches the top ~30% of the viewport"," { rootMargin: \"0px 0px -70% 0px\", threshold: 0 },"," );"," for (const [id] of TOC) {"," const el = document.getElementById(id);"," if (el) observer.observe(el);"," }"," return () => observer.disconnect();"," }, []);"," return ("," "," "," {t(\"eyebrow\")} "," {t(\"heading\")} "," {t(\"lead\")} "," "," "," "," {t(\"contentsEyebrow\")} "," "," {TOC.map(([id, labelKey]) => ("," "," setActiveId(id)}"," >"," {t(labelKey)}"," "," "," ))}"," "," "," "," {t(\"gettingAroundHeading\")} "," "," "," }} />"," "," }} />"," }} />"," }} />"," "," {t(\"signingInHeading\")} "," }} />"," , em: }} />"," , em: }} />"," , em: }} />"," }} />"," }} />"," }} />"," }} />"," "," }} />"," "," {t(\"dailyLoopHeading\")} "," }} />"," {t(\"dailyLoopSummary\")} "," {t(\"rolesHeading\")} "," }} />"," }} />"," }} />"," }} />"," {/* #356 — disable/re-enable a colleague's sign-in. */}"," }} />"," , em: }} />"," {t(\"dialogsHeading\")} "," }} />"," }} />"," }} />"," {/* #482 — the page behind a popup is now genuinely out of reach, for"," the pointer and for a screen reader alike. */}"," }} />"," {/* #236 — the pending-save indicator, in the section that already"," explains save/retry behaviour. */}"," {tc(\"workingHint\")}"," }} />"," {/* #250 — the −/+ steppers rolled out beyond daily entry. */}"," }} />"," }} />"," }} />"," {t(\"dailyEntryHeading\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"dailyEntrySaveBar\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"dailyEntryDepletedBackfill\")} "," {t(\"flocksHeading\")} "," }} />"," }} />"," {t(\"flocksPermissions\")} "," {t(\"gradesHeading\")} "," }} />"," , em: }} />"," {t(\"gradesAdminOnly\")} "," {t(\"productsHeading\")} "," {t(\"productsWhatYouSell\")} "," }} />"," {t(\"stockHeading\")} "," }} />"," }} />"," {t(\"stockFifo\")} "," , em: }} />"," {t(\"inventoryHeading\")} "," }} />"," }} />"," }} />"," , em: }} />"," {t(\"inventoryPermissions\")} "," {t(\"feedHeading\")} "," }} />"," }} />"," }} />"," {t(\"waterHeading\")} "," }} />"," }} />"," {t(\"waterLifecycle\")} "," {t(\"salesHeading\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"reportsHeading\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"expensesHeading\")} "," {t(\"expensesRecording\")} "," }} />"," {t(\"expensesAdminOnly\")} "," {t(\"historyHeading\")} "," {t(\"historyBrowse\")} "," }} />"," }} />"," {t(\"auditHeading\")} "," {t(\"auditLog\")} "," {t(\"auditRecordTypeFilter\")} "," {t(\"auditRecordHistory\")} "," {t(\"auditRecordHistoryLink\")} "," {t(\"auditRecordHistorySubmit\")} "," {t(\"auditRecordHistoryOlder\")} "," {t(\"exportHeading\")} "," }} />"," {t(\"exportFormats\")} "," {t(\"farmSettingsHeading\")} "," }} />"," , em: }} />"," }} />"," {/* #452 — preset dropdown + Custom escape hatch for date/time format overrides. */}"," }} />"," }} />"," }} />"," {/* #179 — the post-login splash banner, independent of the logo above. */}"," }} />"," {/* #444 — the farm-default Daily Entry counting unit. */}"," }} />"," {t(\"farmPaletteHeading\")} "," {t(\"farmPaletteIntro\")} "," {t(\"farmPaletteLightNight\")} "," {/* #444 — the personal counterpart to Farm settings: what each signed-in"," person can set for themselves, whatever their role. */}"," {t(\"accountHeading\")} "," }} />"," }} />"," }} />"," {t(\"installHeading\")} "," {t(\"installIntro\")} "," }} />"," }} />"," }} />"," }} />"," {t(\"mistakesHeading\")} "," "," }} />"," "," "," "," "," "," "," "," "," "," "," "," "," "," "," }} />"," "," }} />"," "," "," "," }} />"," "," }} />"," "," }} />"," "," }} />"," "," {t(\"mistakesTableMistakeHeader\")} {t(\"mistakesTableFixHeader\")} {t(\"mistakesRow1Mistake\")} }} /> {t(\"mistakesRow2Mistake\")} }} /> {t(\"mistakesRow3Mistake\")} "," }} />"," {t(\"mistakesRow4Mistake\")} }} /> {t(\"mistakesRow6Mistake\")} {t(\"mistakesRow6Fix\")} {t(\"mistakesRow7Mistake\")} }} /> }} /> }} /> "," {t(\"glossaryHeading\")} "," {t(\"glossaryNavigationTerm\")}"," {t(\"glossaryNavigationDef\")}"," {t(\"glossaryOperationalDayTerm\")}"," {t(\"glossaryOperationalDayDef\")}"," {t(\"glossaryInstallToHomeScreenTerm\")}"," }} />"," {t(\"glossaryNewVersionReadyTerm\")}"," {t(\"glossaryNewVersionReadyDef\")}"," {t(\"glossaryTooManySignInAttemptsTerm\")}"," {t(\"glossaryTooManySignInAttemptsDef\")}"," {t(\"glossaryForcedReauthTerm\")}"," }} />"," {t(\"glossaryTooManyReportsTerm\")}"," {t(\"glossaryTooManyReportsDef\")}"," {t(\"glossaryStepUpAuthTerm\")}"," {t(\"glossaryStepUpAuthDef\")}"," {t(\"glossarySomethingWentWrongScreenTerm\")}"," {t(\"glossarySomethingWentWrongScreenDef\")}"," {t(\"glossaryDailyEntryTerm\")}"," {t(\"glossaryDailyEntryDef\")}"," {t(\"glossaryEggLotTerm\")}"," {t(\"glossaryEggLotDef\")}"," {t(\"glossaryGradeTerm\")}"," {t(\"glossaryGradeDef\")}"," {t(\"glossaryEggMovementLedgerTerm\")}"," {t(\"glossaryEggMovementLedgerDef\")}"," {t(\"glossaryStockWriteOffTerm\")}"," {t(\"glossaryStockWriteOffDef\")}"," {t(\"glossaryFifoTerm\")}"," {t(\"glossaryFifoDef\")}"," {t(\"glossaryCullTerm\")}"," {t(\"glossaryCullDef\")}"," {t(\"glossaryMortalityTerm\")}"," {t(\"glossaryMortalityDef\")}"," {t(\"glossaryDepleteTerm\")}"," {t(\"glossaryDepleteDef\")}"," {t(\"glossaryArchiveTerm\")}"," {t(\"glossaryArchiveDef\")}"," {t(\"glossaryWithdrawalRestrictionTerm\")}"," {t(\"glossaryWithdrawalRestrictionDef\")}"," {t(\"glossaryProductTerm\")}"," {t(\"glossaryProductDef\")}"," {t(\"glossaryPackedUnitTerm\")}"," {t(\"glossaryPackedUnitDef\")}"," {/* #444 — beside the packed unit it counts by. */}"," {t(\"glossaryCountingUnitTerm\")}"," {t(\"glossaryCountingUnitDef\")}"," {t(\"glossarySalesLineTerm\")}"," {t(\"glossarySalesLineDef\")}"," {t(\"glossaryConfirmOrderTerm\")}"," {t(\"glossaryConfirmOrderDef\")}"," {t(\"glossaryVoidOrderTerm\")}"," {t(\"glossaryVoidOrderDef\")}"," {t(\"glossaryCancelOrderTerm\")}"," {t(\"glossaryCancelOrderDef\")}"," {t(\"glossaryInventoryItemTerm\")}"," {t(\"glossaryInventoryItemDef\")}"," {t(\"glossaryInventoryLotTerm\")}"," {t(\"glossaryInventoryLotDef\")}"," {t(\"glossaryInventoryMovementLedgerTerm\")}"," {t(\"glossaryInventoryMovementLedgerDef\")}"," {t(\"glossaryWaterUsageTerm\")}"," {t(\"glossaryWaterUsageDef\")}"," {t(\"glossaryFeedUsageTerm\")}"," {t(\"glossaryFeedUsageDef\")}"," {t(\"glossaryAdjustmentDiscardTerm\")}"," {t(\"glossaryAdjustmentDiscardDef\")}"," {t(\"glossaryRolesTerm\")}"," {t(\"glossaryRolesDef\")}"," {t(\"glossaryLockedEntryTerm\")}"," {t(\"glossaryLockedEntryDef\")}"," {t(\"glossaryAdjustEntryTerm\")}"," {t(\"glossaryAdjustEntryDef\")}"," {t(\"glossaryVoidEntryTerm\")}"," {t(\"glossaryVoidEntryDef\")}"," {t(\"glossaryFarmSettingsTerm\")}"," {t(\"glossaryFarmSettingsDef\")}"," {t(\"glossaryCurrencyLockTerm\")}"," {t(\"glossaryCurrencyLockDef\")}"," {t(\"glossaryFarmLogoTerm\")}"," {t(\"glossaryFarmLogoDef\")}"," {t(\"glossaryFarmBannerTerm\")}"," {t(\"glossaryFarmBannerDef\")}"," {t(\"glossaryFarmPaletteTerm\")}"," {t(\"glossaryFarmPaletteDef\")}"," {t(\"glossaryUiLanguageTerm\")}"," {t(\"glossaryUiLanguageDef\")}"," {/* #356 — appended last so it doesn't reshuffle the rows above. */}"," {t(\"glossaryDisabledUserTerm\")}"," {t(\"glossaryDisabledUserDef\")}"," "," }} />"," "," "," "," );","}","web/src/routes/AuditPage.test.tsx",[4850],{"_923":687,"_924":4851,"_422":4852,"_927":62},951,[4853,4854,4855,4856,4857,4858,4859,202,4860,4861,4862,4487,4863,4864,4865,4866,4867,4868,4869,4870,4871,4872,4873,202,4874,202,4875,4876,4877,4878,4879,4846,4847,202,4880,4881,4882,4883,4884,4885,4886,4887,4888,4889,4890,4891,4892,4893,4894,4895,4896,4897,4898,4889,202,4899,4900,4901,4902,4903,202,4904,4905,4906,4907,4908,202,4909,4910,4911,4912,202,4913,4914,4915,4916,202,4917,4918,4908,4919,4912,202,4920,4918,4908,4911,4921,4922,4540,4912,202,4923,4924,4925,4926,4927,4928,4929,4908,4911,4930,4931,4932,4912,202,4933,4908,4911,4934,4935,4936,4937,4912,202,4938,4939,4940,4941,4942,4908,4911,4943,4944,4945,4946,4947,4948,4949,4950,4912,202,4951,4952,4953,4954,4955,4956,4957,4958,4959,4960,4961,4962,4963,4964,4965,4908,202,4966,4967,4968,4969,4970,4971,4912,202,4972,4973,4908,202,4974,4975,4976,4977,4978,4979,4980,4981,4982,4983,4984,202,4985,4986,4987,4912,202,4988,4989,4908,4990,4991,4992,4993,4912,4903,202,4994,4995,4918,4908,4996,202,4997,4998,4999,202,5000,5001,5002,4540,4912,202,5003,4908,4911,202,5004,5005,5006,5007,202,5008,5009,4999,202,5010,5011,5012,4540,5013,5014,4912,202,5015,4918,4908,4911,202,4997,5016,5017,5018,4999,5001,5019,4540,202,5020,5021,4997,5022,5023,5018,4999,202,5001,5024,4540,5025,4912,202,5026,5027,4911,202,5028,5029,4540,4912,202,5030,5031,4911,202,5028,5032,4540,5033,5034,5035,5036,5037,4912,202,5038,4918,5039,5040,5041,5042,4911,202,5001,5024,4540,5025,4912,202,5043,5027,4911,202,5008,5044,4999,202,5028,5032,4540,5033,5034,5035,5036,5045,4912,4903,202,5046,5047,5048,5049,5050,5051,5052,5053,4908,202,5054,4997,5055,4999,202,5001,5056,4540,5057,4912,4903,202,5058,5059,5058,202,5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,5070,5071,5072,5073,5074,5075,5076,4999,5077,202,5078,5079,5080,5081,5082,5083,4999,4912,202,5084,5085,5086,5087,5088,5089,5090,5091,5092,5093,5094,5095,4999,4912,202,5096,5097,5098,5093,5099,5100,4999,4912,202,5101,5102,5098,5093,5103,5104,4999,4912,202,5105,5106,5080,5107,5108,5109,4999,4912,202,5110,5111,5080,5107,5112,5113,5114,5115,4999,4912,202,5116,5117,5080,5107,5118,5119,4999,4912,202,5120,5121,5122,5123,5124,5125,5126,5127,5128,5129,5130,5131,5132,5133,5134,5135,5136,5137,5138,5139,5140,5141,5142,5143,5018,4544,4912,202,5144,5145,5080,5146,5147,4999,4912,202,5148,5049,5149,5051,5150,5151,5080,5152,5153,4999,4912,202,5154,5155,5156,5157,5158,5080,5159,5160,5161,5162,4999,4912,202,5163,5164,5165,5166,5167,5168,5169,5080,5107,5170,5171,5172,4999,4912,202,5173,5174,5175,5176,5177,5178,5179,5180,5080,5181,5182,5183,4999,4912,4903,202,5058,5184,5058,202,5185,5186,5187,202,5188,5189,4918,5190,5191,4921,5192,4540,4912,202,5193,5194,5195,5196,5190,5197,5198,4912,202,5199,4918,5190,5200,4912,202,5201,4918,5202,4911,5203,5204,5205,5206,5207,5208,5209,4912,202,5210,5211,5212,5213,5214,5215,5216,5217,5218,5194,5219,5196,5220,202,5197,5221,5222,4921,5223,4540,4912,202,5224,4918,5190,5191,202,4997,4998,4999,202,5001,5225,4540,4912,202,5226,4918,5227,4911,202,4997,4998,4999,202,5001,5228,4540,4912,202,5229,5230,5231,5232,5233,5234,5235,5195,5196,5190,5197,202,5236,5237,202,4997,4998,4999,202,5238,5239,5240,5241,202,4997,5242,4999,5197,4912,202,5243,5194,5195,5196,5244,5245,5246,5247,5248,5249,5250,5251,202,5227,5252,5253,5254,4912,202,5255,4918,5190,5256,5257,4912,4903,202,5258,5259,5260,5261,5262,5263,5264,5265,202,5266,5267,5268,5269,5270,5271,5272,4876,4877,5273,5274,5275,5276,4879,4846,4847,202,5277,5278,5279,5280,4876,4877,5281,5282,5274,5275,5276,4879,4846,4847,202,5283,5284,5285,5286,5287,5288,5289,5290,4876,4877,5281,5282,5291,5274,5275,5276,4879,4846,4847,202,5292,5293,5235,5195,5196,5294,5197,202,5235,5295,5196,4997,5296,4999,202,5297,5241,5001,5298,4540,5299,5300,4912,202,5301,5235,5195,5196,5294,5197,202,5302,5303,4997,5296,4999,202,5240,5241,202,4997,5304,4999,5297,5305,5306,5307,5308,5001,5298,4540,4912,202,4903,202,5309,5310,5311,5312,5313,5314,5315,5316,5317,5318,5319,5320,5321,5322,5323,5324,5325,5326,5327,4912,202,5328,5329,5330,5331,4912,4903,202,5332,5333,5334,5335,5336,5337,5338,5235,5195,5196,5339,5340,5341,5342,5343,5344,5345,4540,5197,202,5346,4997,5347,4999,202,5348,5241,5349,5350,5351,5352,5222,5353,5001,5354,4540,4912,202,5355,5356,5357,5358,5359,5360,5361,5362,5363,5364,5365,5366,5367,5294,5256,202,5235,5295,5196,4997,5296,4999,202,5297,5300,4912,202,5368,5369,5370,5371,5372,5373,5374,5375,5376,5235,5195,5196,5377,5197,202,5378,4997,5379,4999,5240,202,5380,5381,4997,5382,4999,5240,202,4997,5383,4999,202,5297,5221,5300,4912,202,5384,5235,5195,5196,5385,5197,202,5378,4997,5379,4999,202,5386,4997,5382,4999,5240,202,5387,5388,4997,5389,4999,5240,202,4997,5390,4999,202,5391,5221,5392,4912,4903],"import { describe, it, expect, vi, beforeEach } from \"vitest\";","import { render, screen, within, act, fireEvent } from \"@testing-library/react\";","import { Link, MemoryRouter, Route, Routes } from \"react-router\";","import { AuditPage, isFetchStale } from \"./AuditPage\";","import { listAuditEvents } from \"../api/cluckwork\";","import type { AuditEvent } from \"../api/cluckwork\";","import i18n from \"../i18n\";","// AuditPage's only network dep is listAuditEvents; mock that seam so the screen","// renders against controlled data — no network, no backend. ApiError stays real","// (from ../api/client, unmocked) so errText's instanceof checks still hold.","// Role gating is intentionally NOT tested: AuditPage reads useAuth from","// neither — it renders identically for any session. The #93 comment is","// explicit that the admin-only guarantee is enforced by the route/API, not the","// component, so there is no in-component gating behavior to assert. A plain","// AuthProvider-less render is still sufficient for that reason — but #493","// added useSearchParams, so every render now needs a Router ancestor","// (MemoryRouter, not the full renderWithProviders — no Auth/Farm dependency","// here, only routing).","vi.mock(\"../api/cluckwork\", () => ({"," listAuditEvents: vi.fn(),","}));","const mockListAuditEvents = vi.mocked(listAuditEvents);","function renderAudit(route = \"/audit\") {"," return render("," "," "," ,","const EVENT_A: AuditEvent = {"," id: \"a1\","," occurredAtUtc: \"2026-07-19T14:30:05.123Z\","," actorEmail: \"admin@farm.test\","," action: \"Flock.Deplete\","," entityType: \"Flock\","," entityId: \"f1234567-89ab-cdef\","," reason: \"culled sick birds\","," detailsJson: '{\"count\":5}',","};","const EVENT_B: AuditEvent = {"," id: \"a2\","," occurredAtUtc: \"2026-07-18T09:15:00Z\","," actorEmail: \"manager@farm.test\","," action: \"User.Create\","," entityType: \"User\","," entityId: \"u9abcdef-0000\","," reason: null,"," detailsJson: null,","beforeEach(() => {"," vi.clearAllMocks();"," localStorage.clear();"," mockListAuditEvents.mockResolvedValue([]); // default mount-load: empty page","});","describe(\"AuditPage load + render\", () => {"," it(\"shows a loading state until the first audit page resolves\", async () => {"," let resolve!: (events: AuditEvent[]) => void;"," mockListAuditEvents.mockReturnValue(new Promise((r) => (resolve = r)));"," renderAudit();"," expect(screen.getByText(/Loading/)).toBeInTheDocument();"," resolve([]); // settle so the pending fetch doesn't dangle past the test"," await screen.findByText(\"No audit events yet.\");"," });"," // The error branch (listAuditEvents rejects → setError) is NOT asserted: it"," // lives in the mount effect, and in this Vitest 3 + React 19 stack a rejection"," // the component *does* handle is still flagged as an unhandled rejection"," // (documented false positive, matching the StockPage exemplar's rationale)."," it(\"shows the empty-state hint when there are no audit events\", async () => {"," mockListAuditEvents.mockResolvedValue([]);"," expect(await screen.findByText(\"No audit events yet.\")).toBeInTheDocument();"," it(\"loads the first page on mount with no action filter, limit 100, offset 0\", async () => {"," expect(mockListAuditEvents).toHaveBeenCalledWith("," expect.objectContaining({ action: undefined, limit: 100, offset: 0 }),"," // #182, Task 29 — the filter option TEXT is now auditActionLabel(a) (the"," // friendly label), not the raw code; the option's VALUE (the server filter"," // param) stays the raw code. Asserted as two separate expectations rather"," // than just getByRole({name}) so a regression that renders the raw code as"," // the option's visible text (silently breaking the friendly-label feature"," // while still passing a value-only check) fails loudly here."," it(\"offers User.Update as a filterable action, labelled and value-preserved (#163 — the list must be exhaustive)\", async () => {"," const option = screen.getByRole(\"option\", { name: \"User updated\" }) as HTMLOptionElement;"," expect(option.value).toBe(\"User.Update\");"," expect(screen.queryByRole(\"option\", { name: \"User.Update\" })).not.toBeInTheDocument();"," it(\"offers both password actions as filterable, labelled and value-preserved (#165)\", async () => {"," const setOption = screen.getByRole(\"option\", { name: \"Password set\" }) as HTMLOptionElement;"," const changedOption = screen.getByRole(\"option\", { name: \"Password changed\" }) as HTMLOptionElement;"," expect(setOption.value).toBe(\"User.PasswordSet\");"," expect(changedOption.value).toBe(\"User.PasswordChanged\");"," // #247 — the server emits Account.SetLogo/RemoveLogo/UpdateSettings, but the"," // client filter list was missing all three, so admins could not filter by"," // them (rows only showed under \"All actions\"). They must now be offered,"," // labelled + value-preserved like every other action."," it(\"offers the farm logo + settings actions as filterable, labelled and value-preserved (#247)\", async () => {"," const setLogo = screen.getByRole(\"option\", { name: \"Farm logo set\" }) as HTMLOptionElement;"," const removeLogo = screen.getByRole(\"option\", { name: \"Farm logo removed\" }) as HTMLOptionElement;"," const updateSettings = screen.getByRole(\"option\", { name: \"Farm settings updated\" }) as HTMLOptionElement;"," expect(setLogo.value).toBe(\"Account.SetLogo\");"," expect(removeLogo.value).toBe(\"Account.RemoveLogo\");"," expect(updateSettings.value).toBe(\"Account.UpdateSettings\");"," // The raw codes must not leak as the visible option text."," expect(screen.queryByRole(\"option\", { name: \"Account.SetLogo\" })).not.toBeInTheDocument();"," // #247 — a logo row carries entityType \"FarmLogo\", which was absent from"," // ENTITY_TYPE_VALUES and so degraded to the raw \"FarmLogo\" string. It must"," // now render the friendly, translatable label through entityTypeLabel()."," it(\"renders the FarmLogo entity type with its friendly label, not the raw code (#247)\", async () => {"," const LOGO_EVENT: AuditEvent = {"," id: \"a3\","," occurredAtUtc: \"2026-07-20T10:00:00Z\","," actorEmail: \"admin@farm.test\","," action: \"Account.SetLogo\","," entityType: \"FarmLogo\","," entityId: \"fl123456-89ab-cdef\","," reason: null,"," detailsJson: null,"," };"," mockListAuditEvents.mockResolvedValue([LOGO_EVENT]);"," const row = await screen.findByRole(\"row\", { name: /admin@farm\\.test/ });"," // Action cell: friendly label, not the raw \"Account.SetLogo\"."," expect(within(row).getByText(\"Farm logo set\")).toBeInTheDocument();"," // Entity cell: entityTypeLabel(\"FarmLogo\") + first 8 chars of the id."," expect(within(row).getByText(\"Farm logo fl123456\")).toBeInTheDocument();"," expect(within(row).queryByText(\"FarmLogo fl123456\")).not.toBeInTheDocument();"," it(\"maps each audit event's actor, action, entity and reason into its row\", async () => {"," mockListAuditEvents.mockResolvedValue([EVENT_A, EVENT_B]);"," const rowA = await screen.findByRole(\"row\", { name: /admin@farm\\.test/ });"," // occurredAtUtc: \"T\" → space, truncated to the first 19 chars (drops ms/Z)."," expect(within(rowA).getByText(\"2026-07-19 14:30:05\")).toBeInTheDocument();"," // Action cell renders auditActionLabel(e.action), not the raw code."," expect(within(rowA).getByText(\"Flock depleted\")).toBeInTheDocument();"," expect(within(rowA).queryByText(\"Flock.Deplete\")).not.toBeInTheDocument();"," // entityTypeLabel(entityType) + first 8 chars of entityId. \"Flock\" is an"," // identity label (enums:entityType.Flock === \"Flock\"), so this also"," // covers the entity cell reading through entityTypeLabel."," expect(within(rowA).getByText(\"Flock f1234567\")).toBeInTheDocument();"," expect(within(rowA).getByText(\"culled sick birds\")).toBeInTheDocument();"," const rowB = screen.getByRole(\"row\", { name: /manager@farm\\.test/ });"," expect(within(rowB).getByText(\"User u9abcdef\")).toBeInTheDocument();"," expect(within(rowB).getByText(\"—\")).toBeInTheDocument(); // null reason → em dash"," it(\"renders a read-only view with no mutation controls (and no paging on a short page)\", async () => {"," mockListAuditEvents.mockResolvedValue([EVENT_A, EVENT_B]); // 2 < PAGE ⇒ no 'load more'"," await screen.findByRole(\"row\", { name: /admin@farm\\.test/ });"," // #93: the audit trail is deliberately read-only — no adjust/void/delete"," // controls — and 'load more' only appears when a full page came back."," expect(screen.queryByRole(\"button\")).not.toBeInTheDocument();","describe(\"AuditPage filter\", () => {"," it(\"re-queries listAuditEvents with the chosen action when the filter changes\", async () => {"," await screen.findByText(\"No audit events yet.\"); // let the mount load settle first"," await act(async () => {"," fireEvent.change(screen.getByRole(\"combobox\", { name: \"Action\" }), { target: { value: \"Flock.Deplete\" } });"," });"," // The ARGUMENT is the behavior: the chosen action must reach the seam."," expect(mockListAuditEvents).toHaveBeenLastCalledWith("," expect.objectContaining({ action: \"Flock.Deplete\", offset: 0 }),"," it(\"narrows the action dropdown to only actions recorded against the chosen record type\", async () => {"," const actionSelect = screen.getByRole(\"combobox\", { name: \"Action\" }) as HTMLSelectElement;"," const optionValues = () => Array.from(actionSelect.options).map((o) => o.value);"," expect(optionValues()).toContain(\"User.Create\"); // unfiltered: every action listed"," expect(optionValues()).toContain(\"Flock.Deplete\");"," fireEvent.change(screen.getByRole(\"combobox\", { name: \"Record type\" }), {"," target: { value: \"Flock\" },"," // Only Flock-recorded actions remain, plus the \"All actions\" blank option."," expect(optionValues()).toEqual("," expect.arrayContaining([\"\", \"Flock.BirdMovement\", \"Flock.Update\", \"Flock.Deplete\", \"Flock.Archive\", \"Flock.Reactivate\", \"Flock.Create\"]),"," expect(optionValues()).not.toContain(\"User.Create\");"," expect(optionValues()).not.toContain(\"SalesOrder.Void\");"," it(\"resets a selected action that no longer matches once the record type changes\", async () => {"," fireEvent.change(screen.getByRole(\"combobox\", { name: \"Action\" }), {"," target: { value: \"User.Create\" },"," });"," expect.objectContaining({ action: \"User.Create\" }),"," // \"User.Create\" isn't a Flock action — picking Flock as the record type"," // must not leave a hidden, mismatched action filter still in effect."," fireEvent.change(screen.getByRole(\"combobox\", { name: \"Record type\" }), {"," target: { value: \"Flock\" },"," expect.objectContaining({ action: undefined }),"," expect((screen.getByRole(\"combobox\", { name: \"Action\" }) as HTMLSelectElement).value).toBe(\"\");"," it(\"carries the record-type filter in the URL, independent of entityId scoping\", async () => {"," renderAudit(\"/audit?entityType=Flock\");"," expect((screen.getByRole(\"combobox\", { name: \"Record type\" }) as HTMLSelectElement).value).toBe("," \"Flock\","," it(\"falls back to the unfiltered action list for a garbage entityType query value\", async () => {"," renderAudit(\"/audit?entityType=NotARealType\");"," \"\","," expect("," Array.from("," (screen.getByRole(\"combobox\", { name: \"Action\" }) as HTMLSelectElement).options,"," ).map((o) => o.value),"," ).toContain(\"User.Create\"); // unfiltered — the bogus value is ignored, not applied"," it(\"ignores an action from the URL that is incompatible with the entityType also in the URL (codex review of #521)\", async () => {"," // Flock + User.Create is a real but incompatible pair — User.Create is"," // never in Flock's action list, so a hand-edited or shared URL carrying"," // both must not silently keep querying the hidden action."," renderAudit(\"/audit?entityType=Flock&action=User.Create\");"," it(\"clears the entityType query param when the record type is reset to 'All types'\", async () => {"," target: { value: \"\" },"," ).toContain(\"SalesOrder.Void\"); // back to the full, unfiltered list","describe(\"AuditPage paging\", () => {"," it(\"passes the current row count as the offset when 'load more' is clicked\", async () => {"," // A full page (=== PAGE 100) is what sets hasMore, exposing 'load more'."," const firstPage: AuditEvent[] = Array.from({ length: 100 }, (_, i) => ({"," ...EVENT_A, id: `p1-${i}`, actorEmail: `user${i}@farm.test`,"," }));"," const secondPage: AuditEvent[] = [{ ...EVENT_B, id: \"p2-0\", actorEmail: \"next@farm.test\" }];"," mockListAuditEvents.mockResolvedValueOnce(firstPage).mockResolvedValueOnce(secondPage);"," const loadMore = await screen.findByRole(\"button\", { name: \"load more\" });"," fireEvent.click(loadMore);"," expect.objectContaining({ offset: 100 }),"," expect(await screen.findByText(\"next@farm.test\")).toBeInTheDocument(); // appended page row","// ---------------------------------------------------------------------------","// i18n wiring (#182, Task 29, batch B5)","// `audit` is English-only (not in TRANSLATED_NAMESPACES — see","// translations-status.ts), so under ANY UI language the rendered text falls","// back to this exact English string, same as a still-hardcoded literal would","// render — asserting it, even under a non-English locale, would prove nothing","// (CONTRIBUTING-i18n.md's fallback trap). Swap the catalog value at runtime","// instead, the same i18n.addResource technique the other batches use","// (see e.g. UsersPage.test.tsx), so each marker only renders if the screen","// actually reads the catalog rather than a literal that happens to still","// match it. `enums` IS translated, but the override technique is the same:","// it proves the SITE reads the catalog through auditActionLabel/","// entityTypeLabel, independent of which language is active.","describe(\"AuditPage i18n wiring (#182, Task 29)\", () => {"," function withOverride(ns: string, key: string, value: string, run: () => Promise | void) {"," const original = i18n.getResource(\"en\", ns, key) as string;"," i18n.addResource(\"en\", ns, key, value);"," return Promise.resolve(run()).finally(() => {"," i18n.addResource(\"en\", ns, key, original);"," }"," it(\"reads the heading from the audit catalog, not a hardcoded literal\", async () => {"," await withOverride(\"audit\", \"heading\", \"HEADING-MARKER\", async () => {"," renderAudit();"," await screen.findByText(\"No audit events yet.\"); // let the mount load settle"," expect(screen.getByRole(\"heading\", { name: \"HEADING-MARKER\" })).toBeInTheDocument();"," expect(screen.queryByRole(\"heading\", { name: \"Audit log\" })).not.toBeInTheDocument();"," // #493 — entity-scoped heading. entityType is interpolated via"," // entityTypeLabel(), not literal English, so the marker must carry the"," // {{entityType}} placeholder through to prove interpolation still works"," // under the overridden template, not just that SOME text renders."," it(\"reads the scoped heading from the audit catalog, not a hardcoded literal\", async () => {"," await withOverride(\"audit\", \"scopedHeading\", \"SCOPED-MARKER {{entityType}}\", async () => {"," mockListAuditEvents.mockResolvedValue(["," { ...EVENT_A, entityType: \"Flock\", entityId: SCOPED_ENTITY_ID },"," ]);"," renderAudit(`/audit?entityId=${SCOPED_ENTITY_ID}`);"," expect(await screen.findByRole(\"heading\", { name: \"SCOPED-MARKER Flock\" })).toBeInTheDocument();"," expect(screen.queryByRole(\"heading\", { name: \"Flock history\" })).not.toBeInTheDocument();"," it(\"reads the scoped-heading fallback from the audit catalog, not a hardcoded literal\", async () => {"," await withOverride(\"audit\", \"scopedHeadingFallback\", \"FALLBACK-MARKER\", async () => {"," mockListAuditEvents.mockResolvedValue([]);"," expect(await screen.findByRole(\"heading\", { name: \"FALLBACK-MARKER\" })).toBeInTheDocument();"," expect(screen.queryByRole(\"heading\", { name: \"Record history\" })).not.toBeInTheDocument();"," it(\"reads the scoped empty message from the audit catalog, not a hardcoded literal\", async () => {"," await withOverride(\"audit\", \"scopedEmptyMessage\", \"SCOPED-EMPTY-MARKER\", async () => {"," expect(await screen.findByText(\"SCOPED-EMPTY-MARKER\")).toBeInTheDocument();"," expect(screen.queryByText(\"No audit events for this record yet.\")).not.toBeInTheDocument();"," it(\"reads the intro prose from the audit catalog, not a hardcoded literal\", async () => {"," await withOverride(\"audit\", \"intro\", \"INTRO-MARKER\", async () => {"," await screen.findByText(\"No audit events yet.\");"," expect(screen.getByText(\"INTRO-MARKER\")).toBeInTheDocument();"," expect(screen.queryByText(/Every corrective, destructive/)).not.toBeInTheDocument();"," it(\"reads the action filter label from the audit catalog, not a hardcoded literal\", async () => {"," await withOverride(\"audit\", \"actionFilterLabel\", \"FILTER-LABEL-MARKER\", async () => {"," // `{t(...)}` — getByLabelText matches"," // the label's own text only (excluding the wrapped select's rendered"," // option text), same pattern as UsersPage's role picker."," expect(screen.getByLabelText(\"FILTER-LABEL-MARKER\")).toBeInTheDocument();"," it(\"reads the 'All actions' option from the audit catalog, not a hardcoded literal\", async () => {"," await withOverride(\"audit\", \"allActionsOption\", \"ALL-ACTIONS-MARKER\", async () => {"," expect(screen.getByRole(\"option\", { name: \"ALL-ACTIONS-MARKER\" })).toBeInTheDocument();"," expect(screen.queryByRole(\"option\", { name: \"All actions\" })).not.toBeInTheDocument();"," it(\"reads every table header from the audit catalog, not a hardcoded literal\", async () => {"," // At least one event, so the table (with its ) actually renders —"," // the empty-state branch renders no headers at all."," mockListAuditEvents.mockResolvedValue([EVENT_A]);"," // Headers are checked one at a time (each override restored before the"," // next) so a single shared render can't mask one key silently falling"," // back to English while another is overridden."," for (const [key, marker, original] of ["," [\"whenHeader\", \"WHEN-MARKER\", \"When (UTC)\"],"," [\"whoHeader\", \"WHO-MARKER\", \"Who\"],"," [\"actionHeader\", \"ACTION-HEADER-MARKER\", \"Action\"],"," [\"entityHeader\", \"ENTITY-MARKER\", \"Entity\"],"," [\"reasonHeader\", \"REASON-MARKER\", \"Reason\"],"," ] as const) {"," await withOverride(\"audit\", key, marker, async () => {"," // Unmounted at the end of this iteration (afterEach's cleanup() only"," // runs between `it()` blocks, not between loop iterations) — without"," // it, a prior iteration's un-overridden headers would stay in the"," // DOM and falsely satisfy/defeat the next iteration's queries."," const { unmount } = renderAudit();"," await screen.findByRole(\"row\", { name: /admin@farm\\.test/ });"," expect(screen.getByRole(\"columnheader\", { name: marker })).toBeInTheDocument();"," expect(screen.queryByRole(\"columnheader\", { name: original })).not.toBeInTheDocument();"," unmount();"," it(\"reads the empty-state message from the audit catalog, not a hardcoded literal\", async () => {"," await withOverride(\"audit\", \"emptyMessage\", \"EMPTY-MARKER\", async () => {"," expect(await screen.findByText(\"EMPTY-MARKER\")).toBeInTheDocument();"," expect(screen.queryByText(\"No audit events yet.\")).not.toBeInTheDocument();"," it(\"reads the 'load more' button from the audit catalog, not a hardcoded literal\", async () => {"," ...EVENT_A, id: `lm-${i}`, actorEmail: `user${i}@farm.test`,"," mockListAuditEvents.mockResolvedValue(firstPage);"," await withOverride(\"audit\", \"loadMoreButton\", \"LOAD-MORE-MARKER\", async () => {"," expect(await screen.findByRole(\"button\", { name: \"LOAD-MORE-MARKER\" })).toBeInTheDocument();"," expect(screen.queryByRole(\"button\", { name: \"load more\" })).not.toBeInTheDocument();"," // Proves the action table cell reads enums:auditAction.* through"," // auditActionLabel(e.action) rather than rendering e.action raw."," it(\"reads the action cell from the enums catalog via auditActionLabel, not the raw wire code\", async () => {"," mockListAuditEvents.mockResolvedValue([EVENT_A]); // action: \"Flock.Deplete\""," await withOverride(\"enums\", \"auditAction.Flock.Deplete\", \"ACTION-LABEL-MARKER\", async () => {"," const row = await screen.findByRole(\"row\", { name: /admin@farm\\.test/ });"," expect(within(row).getByText(\"ACTION-LABEL-MARKER\")).toBeInTheDocument();"," expect(within(row).queryByText(\"Flock depleted\")).not.toBeInTheDocument();"," expect(within(row).queryByText(\"Flock.Deplete\")).not.toBeInTheDocument();"," // Proves the filter option TEXT reads enums:auditAction.* through"," // auditActionLabel(a), while the option's VALUE (the server filter param)"," // stays the untouched raw code — the two must read from different places"," // (label vs. raw value) and this is the site that would break if someone"," // \"simplified\" the option to `{a}` for both."," it(\"reads the filter option text from the enums catalog while its value stays the raw code\", async () => {"," await withOverride(\"enums\", \"auditAction.User.Update\", \"OPTION-LABEL-MARKER\", async () => {"," const option = screen.getByRole(\"option\", { name: \"OPTION-LABEL-MARKER\" }) as HTMLOptionElement;"," expect(option.value).toBe(\"User.Update\");"," expect(screen.queryByRole(\"option\", { name: \"User updated\" })).not.toBeInTheDocument();"," // Proves the entity table cell reads enums:entityType.* through"," // entityTypeLabel(e.entityType) rather than rendering e.entityType raw."," // EVENT_B's entityType is \"User\" (also an identity label in en, so this"," // override is the only way to distinguish \"reads the catalog\" from"," // \"renders the raw value that happens to equal the label\")."," it(\"reads the entity cell from the enums catalog via entityTypeLabel, not the raw wire value\", async () => {"," mockListAuditEvents.mockResolvedValue([EVENT_B]); // entityType: \"User\", entityId: \"u9abcdef-0000\""," await withOverride(\"enums\", \"entityType.User\", \"ENTITY-LABEL-MARKER\", async () => {"," const row = await screen.findByRole(\"row\", { name: /manager@farm\\.test/ });"," expect(within(row).getByText(\"ENTITY-LABEL-MARKER u9abcdef\")).toBeInTheDocument();"," expect(within(row).queryByText(\"User u9abcdef\")).not.toBeInTheDocument();","// Entity-scoped mode (#493, Slice 1)","// A real canonical GUID, distinct from the fixture events' short ids above","// (which are fine for display but would fail isLikelyGuid as a route param).","const SCOPED_ENTITY_ID = \"f1234567-89ab-4cde-8f01-234567890abc\";","describe(\"AuditPage entity-scoped mode (#493)\", () => {"," it(\"passes entityId to listAuditEvents when present in the URL\", async () => {"," renderAudit(`/audit?entityId=${SCOPED_ENTITY_ID}`);"," await screen.findByText(\"No audit events for this record yet.\");"," expect.objectContaining({ entityId: SCOPED_ENTITY_ID }),"," it(\"renders a scoped heading naming the entity type once the first page has loaded\", async () => {"," mockListAuditEvents.mockResolvedValue(["," { ...EVENT_A, entityType: \"Flock\", entityId: SCOPED_ENTITY_ID },"," ]);"," expect(await screen.findByRole(\"heading\", { name: \"Flock history\" })).toBeInTheDocument();"," expect(screen.queryByRole(\"heading\", { name: \"Audit log\" })).not.toBeInTheDocument();"," it(\"falls back to the generic 'Record history' heading when entityId is present but zero rows return\", async () => {"," expect(await screen.findByRole(\"heading\", { name: \"Record history\" })).toBeInTheDocument();"," it(\"treats a malformed entityId as absent: does not call listAuditEvents with it, renders the unscoped view\", async () => {"," renderAudit(\"/audit?entityId=not-a-guid\");"," // Not objectContaining({ entityId: undefined }) — that matches whether the"," // key is explicitly undefined OR simply absent, so it can't actually prove"," // the malformed value was dropped rather than just never checked. Read the"," // real call args directly instead (review round 1 finding)."," const lastCall = mockListAuditEvents.mock.calls.at(-1)?.[0];"," expect(lastCall?.entityId).toBeUndefined();"," expect(screen.getByRole(\"heading\", { name: \"Audit log\" })).toBeInTheDocument();"," // codex review of #516 — a pasted/hand-typed uppercase GUID is"," // syntactically valid (the guard regex is case-insensitive) and the API"," // accepts it, but its response's entityId is always lowercase (a .NET"," // Guid serialized by System.Text.Json). Without normalizing the URL"," // value, it would build a different fetchPage identity than the"," // lowercase form does, which isFetchStale treats as a genuinely"," // different query — this must NOT get stuck on \"loading\" forever."," it(\"normalizes an uppercase entityId so it matches the lowercase entityId the API returns, and doesn't stick on loading\", async () => {"," const upper = SCOPED_ENTITY_ID.toUpperCase();"," { ...EVENT_A, entityType: \"Flock\", entityId: SCOPED_ENTITY_ID }, // lowercase, as the API returns it"," renderAudit(`/audit?entityId=${upper}`);"," expect(screen.queryByRole(\"heading\", { name: \"Record history\" })).not.toBeInTheDocument();"," expect(await screen.findByRole(\"row\", { name: /admin@farm\\.test/ })).toBeInTheDocument();"," expect.objectContaining({ entityId: SCOPED_ENTITY_ID }), // normalized, not the raw uppercase URL value"," it(\"preserves entityId in the URL when the action filter changes while scoped (updateActionFilter merge)\", async () => {"," expect.objectContaining({ action: \"Flock.Deplete\", entityId: SCOPED_ENTITY_ID }),"," it(\"carries only the action filter (no stray entityId) when changed from the unscoped view\", async () => {"," renderAudit(\"/audit\");"," expect.objectContaining({ action: \"Flock.Deplete\", entityId: undefined }),"," // #493, Slice 2 — the bug this test exists to catch: usePagedList leaves"," // the previous page's rows in place until the new one lands, so reading"," // rows[0] mid-reload would show the PREVIOUS entity's type. Manually"," // controlled (deferred) promise, not one that resolves same-tick, so the"," // reloading=true window is actually observable to the test."," it(\"falls back to the generic heading while a reload is in flight, not the previous entity's type\", async () => {"," mockListAuditEvents.mockResolvedValueOnce(["," let resolveReload!: (events: AuditEvent[]) => void;"," mockListAuditEvents.mockReturnValueOnce(new Promise((r) => (resolveReload = r)));"," // The reload is in flight: the heading must NOT still say \"Flock"," // history\" — that would be the previous page's stale entityType."," expect(screen.getByRole(\"heading\", { name: \"Record history\" })).toBeInTheDocument();"," expect(screen.queryByRole(\"heading\", { name: \"Flock history\" })).not.toBeInTheDocument();"," resolveReload([{ ...EVENT_A, entityType: \"Flock\", entityId: SCOPED_ENTITY_ID }]);"," it(\"hides the entity column when scoped; shows it when unscoped\", async () => {"," const { unmount } = renderAudit(`/audit?entityId=${SCOPED_ENTITY_ID}`);"," const scopedRow = await screen.findByRole(\"row\", { name: /admin@farm\\.test/ });"," expect(screen.queryByRole(\"columnheader\", { name: \"Entity\" })).not.toBeInTheDocument();"," // The header and the row's own are two separate gates in the JSX"," // (review round 1 finding) — asserting only the header would miss a"," // regression that drops the header but leaves the cell rendered."," expect(within(scopedRow).queryByText(/Flock f1234567/)).not.toBeInTheDocument();"," unmount();"," const unscopedRow = await screen.findByRole(\"row\", { name: /admin@farm\\.test/ });"," expect(screen.getByRole(\"columnheader\", { name: \"Entity\" })).toBeInTheDocument();"," expect(within(unscopedRow).getByText(/Flock f1234567/)).toBeInTheDocument();"," it(\"shows a scoped empty message, distinct from the global one, when the record has no events\", async () => {"," expect(await screen.findByText(\"No audit events for this record yet.\")).toBeInTheDocument();"," expect(screen.queryByText(\"No audit events yet.\")).not.toBeInTheDocument();","// #493, Slice 4 — Flow A': clicking a DIFFERENT record's link while already","// on /audit, with no remount. Gate 3's original test plan covered a fresh","// navigation and an action-filter change while scoped, but never this one —","// the primary record-to-record browsing flow — found missing during Slice 4","// review of the design docs, not by a code review of shipped code.","const OTHER_ENTITY_ID = \"b9876543-21fe-4dc0-8b12-fedcba098765\";","const THIRD_ENTITY_ID = \"c1112223-3344-4556-8778-899900112233\";","const FOURTH_ENTITY_ID = \"d2223334-4455-4667-8889-900011223344\";","// A real tree, matching App.tsx's own single-route mapping to","// AuditPage (review round 1: a sibling Link with no Routes couldn't prove","// AuditPage stays mounted across the navigation, only that it happens to).","// Navigating /audit?entityId=A -> /audit?entityId=B never re-matches the","// route (the pathname doesn't change), so AuditPage genuinely never","// remounts here, same as production.","function renderAuditWithSwitchLink(route: string) {"," switch record"," "," } />"," ","// codex review of #516 — a THIRD link, for the delayed double-switch","// scenario that broke the ref-based version of this fix: switching to B,","// then to C before B's fetch resolves.","function renderAuditWithTwoSwitchLinks(route: string) {"," switch to B"," switch to C","// Self-review addition (not a codex finding) — a third switch, belt-and-","// suspenders on top of the B/C test above. Not closing a gap the ticket-system reasoning","// doesn't already cover structurally (any switch's fetch, once superseded,","// is a no-op regardless of resolution order — verified against","// usePagedList.ts's seq guard), but cheap to pin explicitly rather than","// leave to inference given how many rounds this exact mechanism has been","// through.","function renderAuditWithThreeSwitchLinks(route: string) {"," switch to D","describe(\"AuditPage Flow A' — switching records without leaving /audit (#493)\", () => {"," it(\"re-scopes to the new record: re-fires the fetch and updates the heading, not stale on the old one\", async () => {"," renderAuditWithSwitchLink(`/audit?entityId=${SCOPED_ENTITY_ID}`);"," { ...EVENT_B, entityType: \"SalesOrder\", entityId: OTHER_ENTITY_ID },"," fireEvent.click(screen.getByRole(\"link\", { name: \"switch record\" }));"," expect(await screen.findByRole(\"heading\", { name: \"Sales order history\" })).toBeInTheDocument();"," expect.objectContaining({ entityId: OTHER_ENTITY_ID }),"," // Not stale-blended: the row shown belongs to the NEW entity only."," expect(await screen.findByRole(\"row\", { name: /manager@farm\\.test/ })).toBeInTheDocument();"," it(\"shows the generic fallback while the switch is in flight, not the previous record's type\", async () => {"," let resolveSwitch!: (events: AuditEvent[]) => void;"," mockListAuditEvents.mockReturnValueOnce(new Promise((r) => (resolveSwitch = r)));"," resolveSwitch([{ ...EVENT_B, entityType: \"SalesOrder\", entityId: OTHER_ENTITY_ID }]);"," // Not vacuous (review round 1): a component that flipped to the generic"," // fallback WITHOUT actually re-fetching would also pass the assertions"," // above. Pin that the switch really did fire a new request for the new"," // entity, not just an incidental heading change.","// codex review of #516 — the bug the Flow A' tests above can't see, and the","// reason this file went through three shapes of the same mechanism. A","// content-based check (comparing rows' own entityId against the current","// scope) caught the common case but review kept finding variants it","// missed: an empty stale page (no row to compare), and leaving a scope","// entirely (entityId -> undefined, which a content check exits early on by","// design). Two misses of the same shape means the method was wrong —","// isFetchStale compares fetchPage's own reference instead, which closes","// every variant uniformly. A component test can't reliably observe the","// one-render window this guards: RTL's fireEvent wraps the click in a","// synchronous act() that flushes passive effects before any assertion runs","// (confirmed by mutation on an earlier version of this fix: a test that","// awaited the click and checked the DOM afterward passed even with the fix","// reverted). Testing the extracted pure function directly sidesteps the","// timing question entirely.","describe(\"isFetchStale (#493)\", () => {"," it(\"is not stale when comparing a fetchPage reference to itself\", () => {"," const fn = () => Promise.resolve([]);"," expect(isFetchStale(fn, fn)).toBe(false);"," it(\"is stale when the references differ, regardless of what they'd return\", () => {"," const a = () => Promise.resolve([]);"," const b = () => Promise.resolve([]);"," expect(isFetchStale(a, b)).toBe(true);","// Integration coverage for the specific scenarios the OLD content-based","// checks missed — proven via settled state (not a single-render freeze,","// which isFetchStale's direct unit tests above already cover): the","// mechanism must never leave the page stuck, and must never show one","// scope's data under another scope's heading, across every transition.","describe(\"AuditPage stale-scope coverage beyond Flow A' (#493)\", () => {"," it(\"leaving a scope (an explicit unscoped Link, not just typing the URL) settles on the global heading and rows, not stuck on the old scope's data\", async () => {"," render("," "," leave scope"," "," } />"," "," ,"," mockListAuditEvents.mockResolvedValueOnce([EVENT_A, EVENT_B]); // the global, multi-entity log"," fireEvent.click(screen.getByRole(\"link\", { name: \"leave scope\" }));"," expect(await screen.findByRole(\"heading\", { name: \"Audit log\" })).toBeInTheDocument();"," // The entity column is back (unscoped) and BOTH rows show — not left"," // showing only the previous single-entity scope's row under the global"," // heading, which is what the old content-based check could do (it never"," // treated entityId -> undefined as stale)."," expect(screen.getByRole(\"row\", { name: /manager@farm\\.test/ })).toBeInTheDocument();"," expect.objectContaining({ entityId: undefined }),"," // Honest framing (review round): this is a settled-state regression"," // guard, not a test that discriminates the fixed mechanism from the OLD"," // content-based one — with a synchronously-resolving mock inside"," // act(async () => {...}), everything flushes before any assertion runs"," // either way, so the old mechanism would pass this exact test too. The"," // empty-page window it used to miss is closed by isFetchStale's own unit"," // tests plus the reasoning documented on the commit-state site in"," // AuditPage.tsx (isFetchStale doesn't depend on row content at all, so"," // there's no timing-sensitive window left specific to an empty page to"," // observe here). This test's job is narrower and still real: prove the"," // empty-page → switch sequence never wedges the page."," it(\"a scoped view that resolves to a genuinely empty page still settles correctly on a later switch\", async () => {"," mockListAuditEvents.mockResolvedValueOnce([]); // record A: genuinely no events"," // codex review of #516, round 5 — the exact bug a ref-based version of"," // this fix shipped and broke on: switch to B, then switch to C before B's"," // fetch resolves. B is deliberately never resolved here — it doesn't need"," // to be; a superseded fetch's completion is inert regardless (see the"," // ticket-system reasoning documented at the commit-state site in"," // AuditPage.tsx). The ref-based version got stuck on \"Record history\""," // (the generic fallback) forever once C's OWN fetch resolved, because"," // mutating a ref doesn't schedule the extra render the correction needed."," it(\"recovers after switching to a second record before the first one's fetch resolves, not stuck on the generic fallback forever\", async () => {"," renderAuditWithTwoSwitchLinks(`/audit?entityId=${SCOPED_ENTITY_ID}`);"," mockListAuditEvents.mockReturnValueOnce(new Promise(() => {})); // B: never settles"," fireEvent.click(screen.getByRole(\"link\", { name: \"switch to B\" }));"," let resolveC!: (events: AuditEvent[]) => void;"," mockListAuditEvents.mockReturnValueOnce(new Promise((r) => (resolveC = r)));"," fireEvent.click(screen.getByRole(\"link\", { name: \"switch to C\" }));"," resolveC([{ ...EVENT_B, entityType: \"SalesOrder\", entityId: THIRD_ENTITY_ID }]);"," it(\"recovers correctly through a THREE-way switch (B, then C, then D — B and C both superseded before either settles)\", async () => {"," renderAuditWithThreeSwitchLinks(`/audit?entityId=${SCOPED_ENTITY_ID}`);"," mockListAuditEvents.mockReturnValueOnce(new Promise(() => {})); // C: never settles either"," let resolveD!: (events: AuditEvent[]) => void;"," mockListAuditEvents.mockReturnValueOnce(new Promise((r) => (resolveD = r)));"," fireEvent.click(screen.getByRole(\"link\", { name: \"switch to D\" }));"," resolveD([{ ...EVENT_A, entityType: \"Expense\", entityId: FOURTH_ENTITY_ID, actorEmail: \"d-actor@farm.test\" }]);"," expect(await screen.findByRole(\"heading\", { name: \"Expense history\" })).toBeInTheDocument();"," expect(await screen.findByRole(\"row\", { name: /d-actor@farm\\.test/ })).toBeInTheDocument();","web/src/routes/AuditPage.tsx",[5395],{"_923":687,"_924":5396,"_422":5397,"_927":62},284,[5398,5399,5400,4857,5401,5402,5403,5404,5405,5406,5407,5408,5409,202,5410,202,5411,5412,5413,5414,5415,5416,5417,5418,5419,5420,202,5421,5422,4847,202,5423,5424,5425,5426,5427,5428,5429,5430,5431,5432,5433,5434,5435,5436,5437,5438,5439,5440,4847,202,5441,5442,4487,5443,5444,5445,5446,5447,5448,5449,5450,4524,202,5451,5452,5453,5454,5455,5456,5457,5458,5459,5460,5461,5462,202,5463,5464,5465,5466,5467,5468,202,5469,5470,5471,5472,5473,5474,5475,5476,5477,5478,5479,5480,202,5481,5464,5482,5483,5484,5467,5468,202,5485,5486,5487,202,5488,5489,5490,5491,5492,5493,5494,5495,5496,5497,5480,202,5498,5499,5500,5501,5502,5503,5504,5505,5506,5507,5508,5509,4846,5510,202,5511,5512,5513,5514,2839,5515,5516,5517,5518,5519,5520,5521,5522,5523,2839,5524,5525,5526,5527,5528,5529,5530,5531,5532,2839,5533,5534,5535,5536,5537,5538,5539,5540,5541,5542,5543,5544,5545,4527,5546,5547,4544,5548,5549,5550,5551,5552,5553,5554,5555,5556,5557,5558,5559,5560,5561,5562,5563,5564,5565,5566,5567,202,5568,5569,5570,202,4547,5571,5572,5573,5574,5575,5576,5577,5578,5579,202,5580,5581,5582,5583,5584,5585,4569,5586,5587,5588,5589,5590,5591,5592,4569,5586,5587,4553,202,5593,202,5594,5595,5596,5597,5598,5599,5600,5601,5602,5603,5604,5605,5606,5607,5608,5609,5610,5611,5612,5613,5614,5615,5616,5617,5618,5619,5620,5621,5622,5623,5624,5625,5626,5627,5628,5629,5630,5631,5632,5633,5634,5635,5636,5637,5638,5639,4845,4846,4847],"import { useCallback, useEffect, useState } from \"react\";","import { useTranslation } from \"react-i18next\";","import { useSearchParams } from \"react-router\";","import { usePagedList } from \"../components/usePagedList\";","import {"," AUDIT_ACTION_ENTITY_TYPE,"," AUDIT_ACTION_VALUES,"," auditActionLabel,"," ENTITY_TYPE_VALUES,"," entityTypeLabel,"," type EntityTypeValue,","} from \"../i18n/enums\";","const PAGE = 100;","// Canonical 8-4-4-4-12 hex form only, not full Guid.TryParse permissiveness","// (which also accepts braced/no-hyphen forms). This is a correctness guard,","// not just hygiene: the endpoint's model binder is stricter than TryParse,","// so a looser check would let some malformed values through to a guaranteed","// 400. Every server-issued link (row.id) is always canonical; this only","// guards a hand-edited or pasted URL — and, as a known trade-off, also","// rejects a hand-typed but valid noncanonical GUID, silently falling back to","// the unscoped view rather than engineering fuller parsing for that","// low-probability case (#493).","const GUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;","function isLikelyGuid(value: string): boolean {"," return GUID_PATTERN.test(value);","// #493 — usePagedList's identity-change reload is asynchronous:","// `fetchPage`'s identity already reflects a NEW query on the render where a","// navigation lands (a different entityId, a different action, or leaving a","// scope entirely), but `reloading` only flips true inside a useEffect that","// runs AFTER that render commits. Two earlier versions of this fix compared","// the loaded ROWS' own content against the current entityId — that caught","// the common case (rows belong to the wrong entity) but review kept finding","// variants it missed: an empty stale page (no row left to compare), and","// leaving a scope entirely (entityId -> undefined, which a content check","// exits early on by design, so old scoped rows could render as if they were","// the global log). Two misses of the same shape means the METHOD was","// wrong, not just missing a case — comparing `fetchPage`'s own reference","// instead of inferring staleness from content closes every variant","// uniformly: the moment ANYTHING the query depends on changes, rows are","// stale until a completed reload confirms otherwise, full stop, regardless","// of what's in them.","export function isFetchStale(committedFetchPage: unknown, currentFetchPage: unknown): boolean {"," return committedFetchPage !== currentFetchPage;","// #93 — read-only audit trail (admin). Deliberately no mutation surface: the","// rows are written by the server inside the transactions they record.","// #493 — also reachable entity-scoped, via ?entityId= (a \"View","// history\" link on a record's own screen). The URL is the single source of","// truth for BOTH `action` and `entityId`: react-router's setSearchParams","// REPLACES the whole query string rather than merging, so every write here","// goes through updateActionFilter, which builds a full copy from the","// CURRENT params rather than a partial object.","export function AuditPage() {"," const { t } = useTranslation(\"audit\");"," const [searchParams, setSearchParams] = useSearchParams();"," const rawActionFilter = searchParams.get(\"action\") ?? \"\";"," const rawEntityId = searchParams.get(\"entityId\");"," // Lowercased (codex review of #516): the API returns EntityId as a .NET"," // Guid, which System.Text.Json serializes lowercase regardless of the"," // request's casing, but the regex accepting it is case-insensitive."," // Without normalizing here, an uppercase URL value would build a"," // DIFFERENT fetchPage identity than the same record's lowercase form"," // does elsewhere, which is exactly what isFetchStale below treats as \"a"," // different query\" — normalized once here so it doesn't fight its own"," // staleness check."," const entityId = rawEntityId && isLikelyGuid(rawEntityId) ? rawEntityId.toLowerCase() : undefined;"," const updateActionFilter = useCallback((action: string) => {"," const next = new URLSearchParams(searchParams);"," if (action) next.set(\"action\", action);"," else next.delete(\"action\");"," setSearchParams(next);"," }, [searchParams, setSearchParams]);"," // Entity-type filter narrows the action dropdown's OPTION LIST only — it is"," // never sent to the server (the /api/v1/audit query still filters on"," // `action` alone, matching what the backend supports). Changing it drops"," // any selected `action`: AUDIT_ACTION_ENTITY_TYPE is a many-to-one map, so"," // a previously chosen action can fall outside the new type's option list,"," // and leaving it selected-but-hidden would silently keep querying against"," // a type the visible dropdown no longer shows."," const rawEntityTypeFilter = searchParams.get(\"entityType\");"," const entityTypeFilter: EntityTypeValue | \"\" ="," rawEntityTypeFilter && (ENTITY_TYPE_VALUES as readonly string[]).includes(rawEntityTypeFilter)"," ? (rawEntityTypeFilter as EntityTypeValue)"," : \"\";"," const updateEntityTypeFilter = useCallback((type: string) => {"," if (type) next.set(\"entityType\", type);"," else next.delete(\"entityType\");"," next.delete(\"action\");"," const availableActions = entityTypeFilter"," ? AUDIT_ACTION_VALUES.filter((a) => AUDIT_ACTION_ENTITY_TYPE[a] === entityTypeFilter)"," : AUDIT_ACTION_VALUES;"," // codex review of #521 — a hand-edited or shared URL can carry a valid but"," // INCOMPATIBLE pair, e.g. ?entityType=Flock&action=User.Create: the raw"," // action isn't in `availableActions` for that type, so the updateEntityTypeFilter(e.target.value)}>"," "," {ENTITY_TYPE_VALUES.map((et) => ("," "," "," "," {t(\"actionFilterLabel\")}","

{t(\"mistakesTableMistakeHeader\")}	{t(\"mistakesTableFixHeader\")}
{t(\"mistakesRow1Mistake\")}	}} />
{t(\"mistakesRow2Mistake\")}	}} />	{t(\"mistakesRow3Mistake\")}	"," }} />","	{t(\"mistakesRow4Mistake\")}	}} />	{t(\"mistakesRow6Mistake\")}	{t(\"mistakesRow6Fix\")}	{t(\"mistakesRow7Mistake\")}	}} />	}} />	}} />