path: root/apps/web/lib/localization.ts

// SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
// SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1

export const supportedLocales = ["en-US", "de-DE", "ru-RU", "he-IL"] as const;
export type Locale = (typeof supportedLocales)[number];

/** The language of a visitor whose browser asks for none that is published. */
export const fallbackLocale: Locale = "en-US";

export function isLocale(value: string | undefined): value is Locale {
  return supportedLocales.includes(value as Locale);
}

/** Each language named in that language, as a language menu shows it. */
export const localeNames: Record<Locale, string> = {
  "en-US": "English",
  "de-DE": "Deutsch",
  "ru-RU": "Русский",
  "he-IL": "עברית",
};

/**
 * The direction in which the text of a language runs.
 *
 * Only text follows it. The page layout, the navigation and code samples keep
 * their left-to-right arrangement in every language.
 */
export function textDirection(locale: Locale): "ltr" | "rtl" {
  return locale === "he-IL" ? "rtl" : "ltr";
}

/** The arrow that points onward in the reading direction of a language. */
export function forwardArrow(locale: Locale): string {
  return textDirection(locale) === "rtl" ? "←" : "→";
}

// Primary language subtags and the published locale each one selects. `iw` is
// the former code for Hebrew, which some browsers still send.
const localeByLanguage = new Map<string, Locale>([
  ["en", "en-US"],
  ["de", "de-DE"],
  ["ru", "ru-RU"],
  ["he", "he-IL"],
  ["iw", "he-IL"],
]);

/**
 * Chooses the published locale a browser prefers.
 *
 * The argument is an `Accept-Language` header: a list of language ranges,
 * each with an optional quality. The range with the highest quality whose
 * primary language is published wins, and the order of the header breaks
 * ties. A missing header, a header without a published language and a range
 * the visitor refuses with quality zero all give the fallback locale. The
 * header comes from the browser and is not trusted, so only its beginning is
 * read.
 */
export function negotiateLocale(acceptLanguage: string | null): Locale {
  if (!acceptLanguage) {
    return fallbackLocale;
  }
  let selected: Locale = fallbackLocale;
  let selectedQuality = 0;
  for (const range of acceptLanguage.slice(0, 1024).split(",")) {
    const [tag = "", ...parameters] = range.trim().split(";");
    const language = tag.trim().split("-", 1)[0] ?? "";
    const locale = localeByLanguage.get(language.toLowerCase());
    if (!locale) {
      continue;
    }
    let quality = 1;
    for (const parameter of parameters) {
      const [name, value] = parameter.trim().split("=");
      if (name === "q") {
        quality = /^(?:0(?:\.\d{0,3})?|1(?:\.0{0,3})?)$/.test(value ?? "")
          ? Number(value)
          : 0;
      }
    }
    if (quality > selectedQuality) {
      selected = locale;
      selectedQuality = quality;
    }
  }
  return selected;
}

export const localeCookieName = "progmasoft_locale";

export interface LocaleCookieOptions {
  domain: string | undefined;
  httpOnly: true;
  maxAge: number;
  sameSite: "lax";
  secure: boolean;
}

/**
 * Attributes of the language-preference cookie.
 *
 * The preference is shared by every Progmasoft host, so on a production host
 * the cookie belongs to the registrable domain. Any other host, such as a
 * local development name, keeps a host-only cookie. The proxy redirect and
 * the in-page language switch must write the same cookie, or one would leave
 * a second cookie behind that shadows the other.
 */
export function localeCookieOptions(
  host: string,
  secure: boolean,
): LocaleCookieOptions {
  const isProductionHost =
    host === "progmasoft.com" || host.endsWith(".progmasoft.com");
  return {
    domain: isProductionHost ? ".progmasoft.com" : undefined,
    httpOnly: true,
    maxAge: 60 * 60 * 24 * 365,
    sameSite: "lax",
    secure,
  };
}

/** The host a request was addressed to, without its port and in lower case. */
export function requestHost(
  forwardedHost: string | null,
  host: string | null,
): string {
  return (forwardedHost ?? host)?.split(":", 1)[0]?.toLowerCase() ?? "";
}

export const messages = {
  "en-US": {
    metadata: {
      homeTitle: "Progmasoft",
      homeDescription:
        "Progmasoft builds programming-language, package-management, and developer-tooling systems.",
      accountTitle: "Account",
      accountDescription: "Access and manage your Progmasoft account.",
      loginTitle: "Sign in",
      registerTitle: "Create account",
      recoveryTitle: "Recover your account",
      recoveryDescription: "Get help regaining access to a Progmasoft account.",
      dashboardTitle: "Dashboard",
      vigetTitle: "ViGet Package Registry by Progmasoft",
      vigetDescription:
        "The Tala package registry is online, but no packages have been published yet.",
      dslPluginsTitle: "DSL Plugins · ViGet Package Registry by Progmasoft",
      dslPluginsDescription:
        "The ViGet Kotlin DSL plugin catalog is online, but no plugins have been published yet.",
    },
    navigation: {
      primary: "Primary navigation",
      organization: "Organization",
      products: "Products",
      principles: "Principles",
      account: "Account",
      dashboard: "Dashboard",
      signIn: "Sign in",
      createAccount: "Create account",
      theme: "Theme",
      light: "Light",
      dark: "Dark",
      language: "Language",
    },
    footer: {
      summary:
        "Programming-language infrastructure and developer systems built with durable contracts.",
      products: "Products",
      openSource: "Open source",
      organization: "Organization",
      support: "Support",
      websiteSource: "Website source",
      closing: "Designed for clarity, security, and long-term maintenance.",
    },
    account: {
      securityLabel: "Account security properties",
      trust: [
        "Secure session cookie",
        "Server-side password hashing",
        "Rate-limited authentication",
      ],
      landingEyebrow: "Progmasoft account",
      landingTitle: "One clear identity for every supported service.",
      landingDescription:
        "Your account keeps profile, authentication, and service access under a dedicated security boundary.",
      identity: [
        [
          "Account name",
          "Your durable public identity and ViGet publisher name",
        ],
        ["Email", "Recovery and security notices"],
        ["Session", "Secure, revocable browser access"],
      ],
      features: [
        [
          "Deliberate security",
          "Passwords are hashed server-side and session tokens are stored only as digests.",
        ],
        [
          "Predictable names",
          "Canonical account names prevent ambiguous URLs and case-only impersonation. ViGet uses this exact name as the package publisher; it does not create a second identity.",
        ],
        [
          "Service boundaries",
          "Products request explicit account access instead of sharing hidden application state.",
        ],
      ],
      loginEyebrow: "Progmasoft account",
      loginTitle: "Sign in securely.",
      loginDescription:
        "Continue to your account dashboard and connected services.",
      registerEyebrow: "Create an identity",
      registerTitle: "Start with a durable account.",
      registerDescription:
        "Choose the name used in your Progmasoft account URL.",
      recoveryEyebrow: "Account support",
      recoveryTitle: "Recover your account.",
      recoveryDescription:
        "Use the verified support channel when you can no longer sign in.",
      recoveryPanelEyebrow: "Account recovery",
      recoveryPanelTitle: "Regain access safely",
      recoveryPanelDescription:
        "Automated password recovery is not available during the initial account-system rollout. Contact Progmasoft support from the email address registered to your account so ownership can be verified.",
      recoveryEmailSubject: "Progmasoft account recovery",
      contactSupport: "Contact support",
      rememberedPassword: "Remembered your password?",
      returnToSignIn: "Return to sign in",
    },
    auth: {
      createHeading: "Create your account",
      loginHeading: "Welcome back",
      createDescription:
        "Use one Progmasoft identity across supported services.",
      loginDescription:
        "Sign in with the email address attached to your Progmasoft account.",
      accountName: "Account name",
      accountHint:
        "Use 8–128 ASCII letters or digits and begin with an uppercase letter.",
      email: "Email address",
      password: "Password",
      forgotPassword: "Forgot password?",
      passwordHint:
        "Use at least 12 characters. Long passphrases are supported.",
      confirmPassword: "Confirm password",
      show: "Show",
      hide: "Hide",
      working: "Working…",
      create: "Create account",
      signIn: "Sign in",
      or: "or",
      google: "Continue with Google",
      already: "Already have an account?",
      newUser: "New to Progmasoft?",
      createLink: "Create an account",
      mismatch: "The password confirmation does not match.",
      unreachable:
        "The account service is temporarily unreachable. Try again shortly.",
      missingName: "The server did not return an account name.",
      unreadableName: "The Account name field could not be read.",
      requestFailed: "The request could not be completed.",
      googleSignInFailed: "Google sign-in could not be completed. Try again.",
      googleAccountNameRequired:
        "Choose an Account name before continuing with Google.",
      googleAccountNameUnavailable:
        "That Account name is unavailable. Choose another name.",
      googleInvalidAccountName:
        "Use a valid Account name before continuing with Google.",
      googlePoliciesRequired:
        "Accept the Privacy Policy and the Security Policy before continuing with Google.",
      consentStart: "I have read and accept the ",
      consentPrivacy: "Privacy Policy",
      consentMiddle: " and the ",
      consentSecurity: "Security Policy",
      consentEnd: ".",
      consentRequired:
        "Accept the Privacy Policy and the Security Policy to create an account.",
    },
    dashboard: {
      loading: "Loading account…",
      loadFailed: "The dashboard could not be loaded.",
      unreachable: "The account service is temporarily unreachable.",
      navigation: "Dashboard navigation",
      overview: "Overview",
      security: "Security",
      services: "Services",
      signOut: "Sign out",
      eyebrow: "Account overview",
      welcome: "Welcome",
      description: "Manage the identity used by Progmasoft services.",
      profile: "Profile",
      identity: "Account identity",
      accountName: "Account name",
      publisherName: "ViGet publisher name",
      email: "Email",
      created: "Created",
      passwordSessions: "Password and sessions",
      securityDescription:
        "Your browser uses an HttpOnly secure session cookie. Session secrets are never stored as plaintext.",
      changePassword: "Change password",
      products: "Connected Progmasoft products",
      publisherPrefix: "Publisher name",
      sameAccount: "your Account name",
      profileDescription: "Developer ecosystem profile",
      planned: "Planned",
    },
    viget: {
      navigationLabel: "Registry navigation",
      packages: "Packages",
      dslPlugins: "DSL plugins",
      account: "Account",
      login: "Log in",
      register: "Register",
      homeEyebrow: "ViGet package registry",
      homeTitle: "Packages for the Tala ecosystem.",
      homeDescription:
        "ViGet is the canonical source for Tala packages and project DSL plugins, operated directly by Progmasoft.",
      createAccount: "Create account",
      exploreTala: "Explore Tala",
      available: "Registry available",
      emptyTitle: "The public catalog is empty.",
      emptyDescription:
        "No package releases have been published yet. ViGet will show real packages here as they become available.",
      packageFormat: "Package format",
      publisherIdentity: "Publisher identity",
      publishing: "Publishing",
      publishingClosed: "Not open yet",
      catalogsEyebrow: "Catalogs",
      catalogsTitle: "Two artifact types, one registry.",
      catalogsDescription:
        "Packages and project DSL plugins have separate, predictable coordinate spaces.",
      talaPackages: "Tala packages",
      vipkgCatalog: "ViPkg catalog",
      vipkgDescription:
        "Libraries and applications authored in Tala, distributed as .vipkg artifacts.",
      projectExtensions: "Project extensions",
      kotlinPlugins: "Kotlin DSL plugins",
      kotlinDescription:
        "Kotlin JAR plugins that extend the project file of Tazel.",
      openCatalog: "Open catalog",
      contractEyebrow: "Registry contract",
      contractTitle: "Clear ownership from identity to artifact.",
      principles: [
        [
          "One account name",
          "Your Progmasoft Account name is also your ViGet publisher name.",
        ],
        [
          "Case-sensitive coordinates",
          "Publisher and package names retain their exact public spelling.",
        ],
        [
          "No placeholder releases",
          "The catalog stays honestly empty until a real signed artifact is published.",
        ],
      ],
      pluginEyebrow: "ViGet · Kotlin DSL plugins",
      pluginTitle: "Extend the project model.",
      pluginDescription:
        "Kotlin DSL plugins are JAR artifacts for the project file of Tazel. They are separate from Tala .vipkg packages.",
      backToPackages: "Back to packages",
      followDevelopment: "Follow development",
      pluginAvailable: "Catalog available",
      pluginEmptyTitle: "No public DSL plugins yet.",
      pluginEmptyDescription:
        "The catalog is ready and intentionally contains no placeholder artifacts.",
      guidance: [
        [
          "Format",
          "Kotlin JAR",
          "DSL plugins run as Kotlin/JVM project extensions.",
        ],
        [
          "Location",
          "Dedicated catalog",
          "Plugin coordinates always begin with /dslplugins/tazel.",
        ],
        [
          "Availability",
          "Progmasoft first",
          "Progmasoft publishes the first plugins; publishing opens to every account later.",
        ],
      ],
      footerDescription:
        "ViGet is the package and Kotlin DSL plugin registry for the Tala ecosystem.",
      registry: "Registry",
      support: "Support",
      source: "Source",
      footerClosing: "ViGet Package Registry by Progmasoft",
    },
  },
  "de-DE": {
    metadata: {
      homeTitle: "Progmasoft",
      homeDescription:
        "Progmasoft entwickelt Systeme für Programmiersprachen, Paketverwaltung und Entwicklerwerkzeuge.",
      accountTitle: "Konto",
      accountDescription: "Öffnen und verwalten Sie Ihr Progmasoft-Konto.",
      loginTitle: "Anmelden",
      registerTitle: "Konto erstellen",
      recoveryTitle: "Konto wiederherstellen",
      recoveryDescription:
        "Erhalten Sie Hilfe beim Wiederherstellen des Zugriffs auf ein Progmasoft-Konto.",
      dashboardTitle: "Kontoübersicht",
      vigetTitle: "ViGet-Paketregistrierung von Progmasoft",
      vigetDescription:
        "Die Tala-Paketregistrierung ist online, enthält aber noch keine veröffentlichten Pakete.",
      dslPluginsTitle: "DSL-Plugins · ViGet-Paketregistrierung von Progmasoft",
      dslPluginsDescription:
        "Der ViGet-Katalog für Kotlin-DSL-Plugins ist online, enthält aber noch keine veröffentlichten Plugins.",
    },
    navigation: {
      primary: "Hauptnavigation",
      organization: "Organisation",
      products: "Produkte",
      principles: "Grundsätze",
      account: "Konto",
      dashboard: "Übersicht",
      signIn: "Anmelden",
      createAccount: "Konto erstellen",
      theme: "Darstellung",
      light: "Hell",
      dark: "Dunkel",
      language: "Sprache",
    },
    footer: {
      summary:
        "Programmiersprachen-Infrastruktur und Entwicklersysteme auf der Grundlage beständiger Verträge.",
      products: "Produkte",
      openSource: "Open Source",
      organization: "Organisation",
      support: "Support",
      websiteSource: "Quellcode der Website",
      closing:
        "Entwickelt für Klarheit, Sicherheit und langfristige Wartbarkeit.",
    },
    account: {
      securityLabel: "Sicherheitsmerkmale des Kontos",
      trust: [
        "Sicheres Sitzungs-Cookie",
        "Serverseitiges Passwort-Hashing",
        "Begrenzte Anmeldeversuche",
      ],
      landingEyebrow: "Progmasoft-Konto",
      landingTitle: "Eine klare Identität für jeden unterstützten Dienst.",
      landingDescription:
        "Ihr Konto hält Profil, Authentifizierung und Dienstzugriff in einem eigenen Sicherheitsbereich.",
      identity: [
        [
          "Kontoname",
          "Ihre beständige öffentliche Identität und Ihr ViGet-Publishername",
        ],
        ["E-Mail", "Wiederherstellungs- und Sicherheitshinweise"],
        ["Sitzung", "Sicherer, widerrufbarer Browserzugriff"],
      ],
      features: [
        [
          "Bewusste Sicherheit",
          "Passwörter werden serverseitig gehasht; Sitzungstoken werden nur als Digests gespeichert.",
        ],
        [
          "Eindeutige Namen",
          "Kanonische Kontonamen verhindern mehrdeutige URLs und Nachahmung nur durch Groß-/Kleinschreibung. ViGet verwendet exakt diesen Namen als Publisher und erstellt keine zweite Identität.",
        ],
        [
          "Klare Dienstgrenzen",
          "Produkte fordern ausdrücklichen Kontozugriff an, statt verborgenen Anwendungszustand zu teilen.",
        ],
      ],
      loginEyebrow: "Progmasoft-Konto",
      loginTitle: "Sicher anmelden.",
      loginDescription:
        "Weiter zur Kontoübersicht und zu verbundenen Diensten.",
      registerEyebrow: "Identität erstellen",
      registerTitle: "Beginnen Sie mit einem beständigen Konto.",
      registerDescription:
        "Wählen Sie den Namen für Ihre Progmasoft-Konto-URL.",
      recoveryEyebrow: "Kontosupport",
      recoveryTitle: "Konto wiederherstellen.",
      recoveryDescription:
        "Nutzen Sie den verifizierten Supportkanal, wenn Sie sich nicht mehr anmelden können.",
      recoveryPanelEyebrow: "Kontowiederherstellung",
      recoveryPanelTitle: "Zugriff sicher wiederherstellen",
      recoveryPanelDescription:
        "Die automatische Passwortwiederherstellung ist während der ersten Einführung des Kontosystems nicht verfügbar. Kontaktieren Sie den Progmasoft-Support von der im Konto registrierten E-Mail-Adresse, damit die Inhaberschaft geprüft werden kann.",
      recoveryEmailSubject: "Wiederherstellung des Progmasoft-Kontos",
      contactSupport: "Support kontaktieren",
      rememberedPassword: "Passwort wieder eingefallen?",
      returnToSignIn: "Zur Anmeldung",
    },
    auth: {
      createHeading: "Konto erstellen",
      loginHeading: "Willkommen zurück",
      createDescription:
        "Nutzen Sie eine Progmasoft-Identität für alle unterstützten Dienste.",
      loginDescription:
        "Melden Sie sich mit der E-Mail-Adresse Ihres Progmasoft-Kontos an.",
      accountName: "Kontoname",
      accountHint:
        "Verwenden Sie 8–128 ASCII-Buchstaben oder Ziffern und beginnen Sie mit einem Großbuchstaben.",
      email: "E-Mail-Adresse",
      password: "Passwort",
      forgotPassword: "Passwort vergessen?",
      passwordHint:
        "Verwenden Sie mindestens 12 Zeichen. Lange Passphrasen werden unterstützt.",
      confirmPassword: "Passwort bestätigen",
      show: "Anzeigen",
      hide: "Ausblenden",