feat(admin): localize the operator app with react-i18next (3/4)

clients/admin/docker/config.json.template

@@ -1,5 +1,6 @@
 {
   "apiBase": "${FSH_API_URL}",
   "defaultTenant": "${FSH_DEFAULT_TENANT}",
-  "dashboardUrl": "${FSH_DASHBOARD_URL}"
+  "dashboardUrl": "${FSH_DASHBOARD_URL}",
+  "defaultLanguage": "${FSH_DEFAULT_LANGUAGE}"
 }

clients/admin/docker/docker-entrypoint.sh

@@ -5,10 +5,12 @@ set -e
 : "${FSH_API_URL:?FSH_API_URL is required (e.g. https://api.example.com)}"
 : "${FSH_DASHBOARD_URL:?FSH_DASHBOARD_URL is required (e.g. https://app.example.com)}"
 
-# Defaults for non-required values.
+# Defaults for non-required values. The language default matches the one the bundle falls back to,
+# so an unset variable and an absent config.json land on the same UI language.
 : "${FSH_DEFAULT_TENANT:=root}"
+: "${FSH_DEFAULT_LANGUAGE:=en-US}"
 
-export FSH_API_URL FSH_DASHBOARD_URL FSH_DEFAULT_TENANT
+export FSH_API_URL FSH_DASHBOARD_URL FSH_DEFAULT_TENANT FSH_DEFAULT_LANGUAGE
 
 # Render the runtime config from the template, writing into nginx's web root.
 envsubst < /usr/share/nginx/html/config.json.template > /usr/share/nginx/html/config.json

clients/admin/package.json

@@ -22,11 +22,14 @@
     "@types/qrcode": "^1.5.6",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
+    "i18next": "^26.3.6",
+    "i18next-browser-languagedetector": "^8.2.1",
     "lucide-react": "^0.475.0",
     "qrcode": "^1.5.4",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "react-hook-form": "^7.54.2",
+    "react-i18next": "^17.0.10",
     "react-router-dom": "^7.1.5",
     "sonner": "^2.0.7",
     "tailwind-merge": "^3.0.1",

clients/admin/playwright.config.ts

@@ -18,6 +18,11 @@ export default defineConfig({
     actionTimeout: 10_000,
     navigationTimeout: 15_000,
   },
+  // Assertions get the same budget as actions. Left at the 5s default they were
+  // the tightest deadline in the suite — every test ends in a toBeVisible, and
+  // under CPU contention the first paint of a lazy route lands past 5s while
+  // staying well inside the action and navigation budgets.
+  expect: { timeout: 10_000 },
   projects: [{ name: "chromium", use: { ...devices["Desktop Chrome"] } }],
   webServer: {
     command: "npm run dev",

clients/admin/public/config.json

@@ -3,5 +3,6 @@
   "defaultTenant": "root",
   "dashboardUrl": "http://localhost:5174",
   "inactivityIdleMs": 600000,
-  "inactivityWarningMs": 60000
+  "inactivityWarningMs": 60000,
+  "defaultLanguage": "en-US"
 }

clients/admin/src/App.tsx

@@ -2,6 +2,7 @@ import { Suspense } from "react";
 import { RouterProvider } from "react-router-dom";
 import { QueryClientProvider } from "@tanstack/react-query";
 import { Toaster } from "sonner";
+import { useTranslation } from "react-i18next";
 import { AlertCircle, AlertTriangle, CheckCircle2, Info, Loader2 } from "lucide-react";
 import { queryClient } from "@/lib/query-client";
 import { AuthProvider } from "@/auth/auth-context";
@@ -10,6 +11,7 @@ import { ThemeProvider, useTheme } from "@/components/theme/theme-provider";
 import { router } from "@/routes";
 
 export function App() {
+  const { t } = useTranslation("common");
   return (
     <ThemeProvider>
       <QueryClientProvider client={queryClient}>
@@ -22,7 +24,7 @@ export function App() {
               fallback={
                 <div
                   role="status"
-                  aria-label="Loading"
+                  aria-label={t("loading.label")}
                   className="grid min-h-dvh place-items-center bg-[var(--color-background)]"
                 />
               }

clients/admin/src/api/users.ts

@@ -12,6 +12,8 @@ export type UserDto = {
   phoneNumber?: string | null;
   imageUrl?: string | null;
   twoFactorEnabled?: boolean;
+  /** Persisted BCP 47 UI language tag (e.g. "pt-BR"); null when the user never chose. */
+  locale?: string | null;
 };
 
 export type UserRoleDto = {
@@ -76,6 +78,39 @@ export async function setProfileImage(imageUrl: string | null): Promise<void> {
   });
 }
 
+export type UpdateMyProfileInput = {
+  firstName?: string | null;
+  lastName?: string | null;
+  phoneNumber?: string | null;
+  /** BCP 47 UI language tag persisted on the user (drives the JWT locale claim). */
+  locale?: string | null;
+};
+
+/**
+ * Self-update of the authenticated user's profile (PUT /identity/profile,
+ * server forces the id to the caller). The backend sets FirstName/LastName
+ * unconditionally from the command, so a partial update (e.g. the language
+ * switcher sending only `locale`) would wipe the others. Reads the current
+ * profile from the server first and merges, so any field the caller omits
+ * keeps its persisted value instead of being nulled — never trust a possibly
+ * stale/undefined client-side snapshot for the echoed fields.
+ */
+export async function updateMyProfile(input: UpdateMyProfileInput): Promise<void> {
+  const profile = await getMyProfile();
+  await apiFetch<void>(`${IDENTITY}/profile`, {
+    method: "PUT",
+    body: JSON.stringify({
+      id: profile.id,
+      firstName: input.firstName ?? profile.firstName ?? null,
+      lastName: input.lastName ?? profile.lastName ?? null,
+      phoneNumber: input.phoneNumber ?? profile.phoneNumber ?? null,
+      locale: input.locale ?? profile.locale ?? null,
+      email: profile.email,
+      deleteCurrentImage: false,
+    }),
+  });
+}
+
 export async function changePassword(input: {
   password: string;
   newPassword: string;

clients/admin/src/api/wallet.ts

@@ -3,11 +3,14 @@ import type { PagedResponse } from "@/lib/api-types";
 
 // ─── shared enums ────────────────────────────────────────────────────
 
+// Mirrors TopupRequestStatus in Modules.Billing.Contracts/BillingEnums.cs. "Approved" was never
+// one of them: approving a request moves it to Invoiced.
 export type TopupRequestStatus =
   | "Pending"
-  | "Approved"
-  | "Rejected"
+  | "Invoiced"
   | "Completed"
+  | "Rejected"
+  | "Cancelled"
   | (string & {});
 
 // ─── top-up requests ─────────────────────────────────────────────────

clients/admin/src/auth/protected-route.tsx

@@ -1,4 +1,5 @@
 import { Navigate, Outlet, useLocation } from "react-router-dom";
+import { useTranslation } from "react-i18next";
 import { useAuth } from "@/auth/use-auth";
 import { ForbiddenView } from "@/components/forbidden-view";
 
@@ -14,6 +15,7 @@ type ProtectedRouteProps = {
 export function ProtectedRoute({ permissions = [] }: ProtectedRouteProps) {
   const { isAuthenticated, isInitializing, user } = useAuth();
   const location = useLocation();
+  const { t } = useTranslation("common");
 
   // Resolving a stored session (silent token refresh) — hold rendering so we
   // neither flash a protected surface with a stale/expired token nor bounce to
@@ -25,7 +27,7 @@ export function ProtectedRoute({ permissions = [] }: ProtectedRouteProps) {
         role="status"
         aria-busy="true"
       >
-        <span className="sr-only">Restoring your session…</span>
+        <span className="sr-only">{t("protectedRoute.restoring")}</span>
         <span
           className="size-5 animate-spin rounded-full border-2 border-current border-t-transparent"
           aria-hidden

clients/admin/src/auth/route-guard.tsx

@@ -1,4 +1,5 @@
 import type { ReactNode } from "react";
+import { useTranslation } from "react-i18next";
 import { useAuth } from "@/auth/use-auth";
 import { ForbiddenView } from "@/components/forbidden-view";
 
@@ -25,14 +26,15 @@ type RouteGuardProps = {
  */
 export function RouteGuard({ perms, children }: RouteGuardProps) {
   const { user, permissionsHydrated } = useAuth();
+  const { t } = useTranslation("common");
 
   if (!permissionsHydrated) {
     return (
       <div
         className="flex min-h-[60vh] items-center justify-center text-sm font-mono uppercase tracking-[0.18em] text-[var(--color-muted-foreground)]"
         aria-busy
       >
-        Resolving permissions
+        {t("routeGuard.resolving")}
         <span className="caret text-[var(--color-accent-signal)]" aria-hidden />
       </div>
     );

clients/admin/src/components/auth/auth-shell.tsx

@@ -1,4 +1,5 @@
 import type { ReactNode } from "react";
+import { useTranslation } from "react-i18next";
 import { BrandMarkXL } from "@/components/brand-mark";
 import { cn } from "@/lib/cn";
 
@@ -44,6 +45,7 @@ export function AuthShell({
   /** Form area below the blurb. */
   children: ReactNode;
 }) {
+  const { t } = useTranslation("common");
   return (
     <div className="grid min-h-screen bg-[var(--color-background)] text-[var(--color-foreground)] lg:grid-cols-[1.1fr_1fr]">
       {/* ─── Left pane — brand stage ───────────────────────────────── */}
@@ -65,11 +67,11 @@ export function AuthShell({
           <BrandMarkXL className="fsh-enter fsh-enter-2 max-w-lg" />
           <div className="fsh-enter fsh-enter-4 flex items-end justify-between gap-6">
             <div className="space-y-1">
-              <div className="meta text-[var(--color-muted-foreground)]">authorized personnel</div>
+              <div className="meta text-[var(--color-muted-foreground)]">{t("authShell.authorizedPersonnel")}</div>
               <div className="font-mono text-[12px] text-[var(--color-muted-foreground)] leading-relaxed">
-                Account recovery is rate-limited and audited.
+                {t("authShell.recoveryNotice")}
                 <br />
-                Reset links expire 30 minutes after issue.
+                {t("authShell.recoveryExpiry")}
               </div>
             </div>
             <div className="meta text-right text-[var(--color-muted-foreground)]">