feat: admin controls

app/components/Dialog/RecoverAccount.vue

@@ -13,7 +13,8 @@ const props = defineProps<{
 
 const emit = defineEmits(['confirm', 'cancel']);
 
-// also turn two-factor off and sign every device out when the link is used
+// also turn two-factor off when the link is used, every device is signed out
+// either way
 const resetSecurity = ref(true);
 
 const busy = ref(false);
@@ -96,14 +97,15 @@ const revoke = async () => {
             were given before.
         </p>
 
-        <div v-if="!user.pending" role="note" class="flex gap-2.5 px-3 py-2.5 rounded-lg border border-red-400/40 bg-red-600/12 text-sm leading-normal">
+        <div v-if="!user.pending" role="note"
+            class="flex gap-2.5 px-3 py-2.5 rounded-lg border border-red-400/40 bg-red-600/12 text-sm leading-normal">
             <span class="i-tabler-alert-triangle text-4.5 mt-0.5 flex-shrink-0 text-red-400" aria-hidden="true"></span>
             <div class="flex flex-col gap-0.5">
                 <strong class="font-semibold">This deletes their saved API keys</strong>
                 <span class="text-[13px] text-[var(--text-secondary)]">
                     The keys are encrypted with the old password and nobody can decrypt them without it. They
                     are removed when the link is used, not when it is created. Chats, agents and files are
-                    kept.
+                    not deleted. Using the link signs them out on all devices.
                 </span>
             </div>
         </div>
@@ -135,7 +137,7 @@ const revoke = async () => {
             <label v-if="!user.pending" class="flex items-start gap-2.5 text-sm cursor-pointer">
                 <input v-model="resetSecurity" type="checkbox" :disabled="busy" class="mt-0.75 flex-shrink-0"
                     style="accent-color: var(--color-accent)" />
-                <span>Also reset two-factor and sign out all their sessions</span>
+                <span>Also reset two-factor sign-in</span>
             </label>
 
             <p v-if="revoked" role="status" class="text-sm text-[var(--text-secondary)]">