@anchrd/intel-ui 0.34.0 → 0.36.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anchrd/intel-ui",
-  "version": "0.34.0",
+  "version": "0.36.0",
   "type": "module",
   "license": "UNLICENSED",
   "repository": {
@@ -33,7 +33,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@anchrd/intel-contract": "^0.21.0",
+    "@anchrd/intel-contract": "^0.22.0",
     "@blocknote/core": "^0.52.1",
     "@blocknote/react": "^0.52.1",
     "@blocknote/shadcn": "^0.52.1",

package/src/app/app-tree/app-tree.tsx

@@ -10,7 +10,7 @@ import {
   Plus,
   Upload,
 } from "lucide-react";
-import { useRef, useState } from "react";
+import { useId, useRef, useState } from "react";
 import {
   allTreeLevelsKey,
   type MoveDestination,
@@ -112,6 +112,10 @@ export function AppTree() {
   const uploadInput = useRef<HTMLInputElement>(null);
   const [dragged, setDragged] = useState<Carried | null>(null);
   const draggedRef = useRef<Carried | null>(null);
+  // The id of the one sentence every movable row is described by (#590). Minted rather than written
+  // down: two trees on one page would otherwise share a literal id, and the second would describe
+  // its rows with the first one's element.
+  const movableId = useId();
   // Which target the pointer is over: `undefined` for none, `null` for the root strip, an id for a
   // folder row. Three answers, because "the root" and "nothing" are not the same drop.
   const [over, setOver] = useState<string | null | undefined>(undefined);
@@ -626,6 +630,21 @@ export function AppTree() {
               putting `draggable` on this form control is precisely the Safari failure from #483. */}
           <SidebarMenuButton
             isActive={isActive}
+            /* ⚠️ What says the row is movable BEFORE anything touches it (#590). Until now only
+               `cursor-grab` said it, and that is a statement addressed to a pointer that is already
+               on the row — nobody navigating by keyboard, by touch or by ear ever received it, and
+               a way nobody sees is a way nobody uses. That is how the dead gesture of #483 stayed
+               dead for months without a single report.
+
+               ⚠️ A DESCRIPTION and not part of the name: the name is the title, and twenty rows
+               each announcing an instruction would bury it. It is also one shared element rather
+               than one per row — the sentence is the same for every movable row, and a copy per row
+               is a copy per row to keep in step.
+
+               ⚠️ Absent on a derived row, and that is the whole discrimination: what a flow calls
+               has no `parent_id` to rewrite and is not draggable (`draggable={!derived}`), so
+               claiming it were movable would send somebody after a gesture that is refused. */
+            aria-describedby={derived ? undefined : movableId}
             data-drop={
               dragged === null ? undefined : isDragged ? "dragged" : (drop?.verdict ?? "none")
             }
@@ -673,8 +692,30 @@ export function AppTree() {
 
   return (
     <SidebarGroup className="min-h-0 flex-1 overflow-y-auto">
+      {/* The tree is the navigation and carries no heading of its own (ADR-0004); the list is
+          named for assistive technology instead. */}
+      {renderLevel({ id: null, type: "folder" }, new Set(), i18n.t("tree.label"))}
+      {/* ⚠️ The sentence every movable row points at (#590). It names BOTH ways on purpose: the
+          drag for whoever has a pointer, and the entry in the title line for whoever has not —
+          `resource.move` is the same word it carries there. Naming only the drag would describe a
+          gesture that keyboard and touch do not have, which is the state this ticket found.
+
+          ⚠️ It is rendered AFTER the rows and it is `sr-only`, so it takes no space and moves
+          nothing. Anything a row could be pushed down by is the abort of #483 all over again — and
+          an element that exists from the first render pushes nothing in any case. */}
+      <span id={movableId} className="sr-only">
+        {i18n.t("tree.move.rowHint")}
+      </span>
       {/* The root has no row to drop on, so while something is being carried it gets one. It is the
-          only way back out of a folder, and it appears exactly when it can be used. */}
+          only way back out of a folder, and it appears exactly when it can be used.
+          ⚠️ BELOW the tree, and that is not a matter of taste (#483). It used to stand above it, so
+          the moment a drag began every row moved down by its height — including the row being
+          dragged. Chromium ABORTS a drag whose source shifts under it: `dragstart` fired, `dragend`
+          followed six milliseconds later, and no `drag`, `dragover` or `drop` ever came. The hand
+          appeared and nothing moved, which is exactly what the ticket describes. Below the tree the
+          strip pushes nothing that sits above it, so the source stays where the gesture started.
+          Measured in a real Chromium: with the strip above, the gesture dies; with it here, the same
+          drag reaches the drop and opens the move dialog. */}
       {rootDrop.verdict === undefined || dragged === null ? null : (
         <button
           type="button"
@@ -691,7 +732,7 @@ export function AppTree() {
             });
           }}
           data-drop={rootDrop.verdict}
-          className={`mb-1 flex w-full items-center gap-1 rounded-md border border-dashed px-2 py-1.5 text-left text-sm outline-none focus-visible:ring-2 focus-visible:ring-sidebar-ring ${
+          className={`mt-1 flex w-full items-center gap-1 rounded-md border border-dashed px-2 py-1.5 text-left text-sm outline-none focus-visible:ring-2 focus-visible:ring-sidebar-ring ${
             rootDrop.verdict === "ok"
               ? over === null
                 ? "bg-sidebar-accent ring-2 ring-sidebar-ring"
@@ -703,9 +744,6 @@ export function AppTree() {
           {i18n.t("tree.move.dropRoot")}
         </button>
       )}
-      {/* The tree is the navigation and carries no heading of its own (ADR-0004); the list is
-          named for assistive technology instead. */}
-      {renderLevel({ id: null, type: "folder" }, new Set(), i18n.t("tree.label"))}
       {create.isError || upload.isError || bundleImport.isError ? (
         <p role="alert" className="px-2 py-1.5 text-sm text-destructive">
           {bundleImport.isError

package/src/archive/archive.tsx

@@ -5,8 +5,10 @@ import { ArchiveRestore, LoaderCircle, Trash2 } from "lucide-react";
 import { useState } from "react";
 import { allTreeLevelsKey } from "@/app/tree-move/tree-move.tsx";
 import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "@/components/ui/tooltip";
+import { IntelRequestError } from "@/data/intel-data-provider/intel-data-provider.ts";
 import { useI18n } from "@/i18n/i18n-context.tsx";
 import { kindIcons } from "@/kind-icon.ts";
+import { cn } from "@/lib/utils.ts";
 import { Modal } from "@/modal/modal.tsx";
 import { useIntelRouterContext } from "@/router/router-context.ts";
 import { RelativeTime } from "@/time/relative-time.tsx";
@@ -27,6 +29,70 @@ interface ArchivedEntry {
   previewPurge?(): Promise<{ inboundLinks: number; totalItems: number }>;
 }
 
+/**
+ * The refusal of a permanent deletion — and the one place the reader can actually reach it.
+ *
+ * ⚠️ #601. It used to stand on the page only, and the confirmation dialog that produces it **stays
+ * open** on a refusal while marking everything outside itself `aria-hidden` (`Modal` → react-aria's
+ * `ModalOverlay`). Behind that the sentence was not merely awkward to get at: for a screen reader it
+ * was not there at all, and it announced nothing. Since #593 this is the sentence carrying the NAMES
+ * of the flows that still call the flow — the one thing that makes the refusal actionable, and the
+ * reason the ticket was built.
+ *
+ * ⚠️ It is rendered in exactly ONE of two places, never both: inside the dialog while that is open,
+ * on the page once it is closed. The second half is not a leftover — the reader closes the dialog to
+ * go and change the callers, and the sentence has to still be there when they come back. Two copies
+ * would be two announcements of one answer, which is the `#445` mistake in a new costume.
+ *
+ * ⚠️ This is NOT the `#430` class and does not go through `RefusalNotice`. That one answers a
+ * refused QUERY — a `403`/`404` that leaves a whole pane with nothing to show, told as a centered
+ * sentence without a retry. This is a refused mutation that carries data (`409` with `callers`),
+ * belongs beside the button that caused it, and its problem was never the wording.
+ */
+function PurgeRefusal({ error, className }: { error: unknown; className?: string }) {
+  const i18n = useI18n();
+  /**
+   * ⚠️ Deleting a flow for good is refused with `409 flow_in_use_by_flow` while published flows
+   * still call it (`flows.ts`, `purge`), and the CALLERS are what makes that refusal actionable —
+   * "reload and try again" is advice for a flow nobody calls, and this one is called.
+   *
+   * ⚠️ Since #593 they arrive as data — the flows this reader may see by name, the rest as a count
+   * — so the sentence is written here, in the reader's language, exactly as the share dialog writes
+   * the folder's half of the same rule (#448). The server still decides WHICH may be named; that is
+   * an authorization answer and nothing on this side recomputes it.
+   */
+  const requestError = error instanceof IntelRequestError ? error : null;
+  const inUse = requestError?.code === "flow_in_use_by_flow" ? requestError : null;
+  return (
+    <div role="alert" className={cn("space-y-1 text-sm text-destructive", className)}>
+      {inUse ? (
+        <>
+          <p>{i18n.t("archive.purgeInUse")}</p>
+          {/* An API older than #593 sends no `callers`, and then its own sentence is the only place
+              the titles exist at all. Showing it beats showing nothing. */}
+          {inUse.callers === null ? (
+            <p className="text-xs">{inUse.message}</p>
+          ) : (
+            <p className="text-xs">
+              {inUse.callers.titles.length > 0
+                ? i18n.t("archive.purgeInUseCallers", {
+                    titles: inUse.callers.titles.join(", "),
+                  })
+                : i18n.t("archive.purgeInUseCallersHidden", { count: inUse.callers.hidden })}
+              {inUse.callers.titles.length > 0 && inUse.callers.hidden > 0
+                ? ` ${i18n.t("archive.purgeInUseCallersMore", { count: inUse.callers.hidden })}`
+                : ""}
+              {` ${i18n.t("archive.purgeInUseHint")}`}
+            </p>
+          )}
+        </>
+      ) : (
+        <p>{i18n.t("archive.purgeFailed")}</p>
+      )}
+    </div>
+  );
+}
+
 export function Archive() {
   const { data } = useIntelRouterContext();
   const i18n = useI18n();
@@ -153,12 +219,11 @@ export function Archive() {
             {i18n.t("archive.restoreFailed")}
           </p>
         ) : null}
-        {/* ⚠️ The refusal stands HERE and not in the dialog: it carries the reason — folder not
-            empty, a flow still uses it — and it has to stay readable after the dialog is closed. */}
-        {purge.isError ? (
-          <p role="alert" className="mb-4 text-sm text-destructive">
-            {i18n.t("archive.purgeFailed")}
-          </p>
+        {/* ⚠️ On the page only while no dialog is open (#601). The refusal carries the reason — a
+            flow still calls this one — and it has to survive the dialog it came from; but as long as
+            that dialog stands, the page is `aria-hidden` and this is the copy nobody can reach. */}
+        {purge.isError && !confirming ? (
+          <PurgeRefusal error={purge.error} className="mb-4" />
         ) : null}
         {archived.data?.length === 0 ? (
           <p className="text-sm text-muted-foreground">{i18n.t("archive.empty")}</p>
@@ -225,7 +290,14 @@ export function Archive() {
               <button
                 type="button"
                 disabled={purge.isPending}
-                onClick={() => setConfirming(entry)}
+                onClick={() => {
+                  // ⚠️ The last refusal is cleared as the NEXT dialog opens, not when one closes:
+                  // the sentence has to outlive the dialog it came from (#601), and it must not be
+                  // standing in a dialog about a different entry — that would answer a question
+                  // nobody asked, about the wrong thing.
+                  purge.reset();
+                  setConfirming(entry);
+                }}
                 aria-label={i18n.t("archive.purge", { title: entry.title })}
                 className="inline-flex size-8 shrink-0 items-center justify-center rounded-md border text-destructive outline-none hover:bg-destructive/10 focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-60"
               >
@@ -263,6 +335,10 @@ export function Archive() {
             </p>
           ) : null}
           <p className="mt-2 text-sm text-muted-foreground">{i18n.t("archive.purge.grants")}</p>
+          {/* ⚠️ Inside the dialog, because the dialog stays open on a refusal and hides the page
+              behind it from the accessibility tree entirely (#601). Above the buttons rather than
+              below them: the answer belongs between the reason and the button that asks again. */}
+          {purge.isError ? <PurgeRefusal error={purge.error} className="mt-4" /> : null}
           <div className="mt-6 flex justify-end gap-2">
             <button
               type="button"

package/src/data/intel-data-provider/intel-data-provider.ts

@@ -1,4 +1,4 @@
-import { ProblemDetails, SessionUser } from "@anchrd/intel-contract";
+import { type NamedOrCounted, ProblemDetails, SessionUser } from "@anchrd/intel-contract";
 import { BundleImportResult } from "@anchrd/intel-contract/bundle";
 import {
   ArchiveFlowInput,
@@ -78,10 +78,20 @@ import type { IntelDataProvider, TreeEntry } from "./intel-data-provider.types.t
 // else changed it" — cannot do so from `detail`, which is a sentence the server is free to
 // reword. The code is the contract (`ProblemDetails.code`); the message stays what it was.
 export class IntelRequestError extends Error {
+  /**
+   * ⚠️ `callers` is the structured half of the two refusals that name flows — `folder_execute_in_use`
+   * (#448) and `flow_in_use_by_flow` (#593): the flows this reader may see, by name, and a count of
+   * the ones they may not. It is `null` for every other failure, and a screen that reads it has to
+   * say which code it read it for — the field is only meaningful beside its own.
+   *
+   * `message` still holds the server's finished English sentence. It is no longer what the dialog
+   * shows; it is what a log or a report has when nobody translated anything.
+   */
   constructor(
     public readonly status: number,
     public readonly code: string | null,
     message: string,
+    public readonly callers: NamedOrCounted | null = null,
   ) {
     super(message);
     this.name = "IntelRequestError";
@@ -162,6 +172,7 @@ export function createIntelDataProvider(
         parsed.success
           ? (parsed.data.detail ?? parsed.data.title)
           : `Intel responded with ${result.status}`,
+        parsed.success ? (parsed.data.callers ?? null) : null,
       );
     }
     return result;

package/src/flows/flows.tsx

@@ -45,7 +45,7 @@ import { SaveButton, UnsavedChangesGuard } from "@/save-button/save-button.tsx";
 import { useResolvedTheme } from "@/theme/theme-context.tsx";
 import { TitleRow, TitleRowFrame, TitleRowScrollArea } from "@/title-row/title-row.tsx";
 
-type CanvasNode = ReactFlowNode<{ node: FlowNode }, "intel">;
+type CanvasNode = ReactFlowNode<{ node: FlowNode; branches?: readonly string[] }, "intel">;
 type CanvasEdge = Edge;
 
 // One handle id at both ends of a context edge. React Flow reports the handles a connection was
@@ -53,6 +53,38 @@ type CanvasEdge = Edge;
 // stores the meaning itself, not which dot it was dragged from.
 const ContextHandle = "context";
 
+// What a condition drawn on this canvas calls its branches. A DEFAULT for a new one, not a
+// vocabulary: `sourceHandle` is any non-empty string in the contract, and `compileFlow` asks only
+// that a condition's branches are unique and not null. A graph arrives over MCP as readily as from
+// here, and one whose branches are called something else is as valid as this one.
+const DefaultBranches = ["yes", "no"] as const;
+
+/**
+ * The branch names of one condition, as the loaded graph spells them.
+ *
+ * ⚠️ Read from the edges, never imposed on them. Rendering a fixed `yes`/`no` pair left every edge
+ * saved with other names unattached to any handle — the author redrew it, the redrawn edge took
+ * this canvas's name, and the old edge stayed in the state until its target had two incoming edges
+ * and `compileFlow` refused the save (#627). The names are taken once, when the version is loaded,
+ * so deleting an edge does not take its branch off the card: the handle stays, and drawing the edge
+ * again lands on the same name it had.
+ *
+ * Filled up to two from the defaults only where the graph is short of them — a condition needs two
+ * branches to be worth drawing, and one with none at all would offer nowhere to start.
+ */
+function branchesOf(graph: FlowGraph, nodeId: string): string[] {
+  const named = graph.edges
+    .filter((edge) => edge.kind === "flow" && edge.source === nodeId)
+    .map((edge) => edge.sourceHandle)
+    .filter((handle): handle is string => handle !== null);
+  const branches = [...new Set(named)];
+  for (const fallback of DefaultBranches) {
+    if (branches.length >= DefaultBranches.length) break;
+    if (!branches.includes(fallback)) branches.push(fallback);
+  }
+  return branches;
+}
+
 // The order the bar offers them in: roughly the order a flow is built, from the start to the result.
 // ⚠️ The start is in the bar even though every graph opens with one, because it can be deleted —
 // without an entry there would be no way back to a flow that has a beginning.
@@ -114,6 +146,7 @@ function FlowCard({ data, selected }: NodeProps<CanvasNode>) {
   const broken = isLinkNode(contract) && invalidLinks.has(contract.configuration.resourceId);
   const Icon = nodeIcon[contract.kind];
   const branching = contract.kind === "condition";
+  const branches = data.branches ?? DefaultBranches;
   // ⚠️ The start is told apart by silhouette first (#39): a pill among rectangles, in the primary
   // token. Shape survives zooming out past the point where the label is legible, and it is the only
   // one of the three that also carries into the overview map, where nothing is written at all.
@@ -155,12 +188,18 @@ function FlowCard({ data, selected }: NodeProps<CanvasNode>) {
       {contract.kind !== "output" && !branching && (
         <Handle type="source" position={Position.Right} />
       )}
-      {branching && (
-        <>
-          <Handle id="yes" type="source" position={Position.Right} style={{ top: "35%" }} />
-          <Handle id="no" type="source" position={Position.Right} style={{ top: "70%" }} />
-        </>
-      )}
+      {branching &&
+        branches.map((branch, index) => (
+          <Handle
+            key={branch}
+            id={branch}
+            type="source"
+            position={Position.Right}
+            // Spread over the right edge rather than pinned: a condition may carry more than the two
+            // this canvas offers, and three branches stacked on two fixed points would hide one.
+            style={{ top: `${(100 * (index + 1)) / (branches.length + 1)}%` }}
+          />
+        ))}
       {/* The context point (#37). Sideways is the order of work, downwards is what a step works
           with — including at the output, where the same edge reads as where the result goes. Both
           ends sit on the vertical axis so an attachment hangs under its step and the two meanings
@@ -207,13 +246,34 @@ function defaultGraph(): FlowGraph {
   };
 }
 
+/**
+ * The edges left over once `connection` is drawn.
+ *
+ * ⚠️ A point in the order of work leads to ONE place, and drawing from it again means "there
+ * instead". `compileFlow` says so twice — a step has exactly one outgoing edge, and a condition's
+ * branches are unique — so a second line from the same point can only ever be a graph that will not
+ * save. Dropping the old one here is what #627 cost when nothing did: the author redrew a branch,
+ * both lines stayed, and the refusal that followed named a node they had not touched.
+ *
+ * The context point is the exception it has always been: a step works with as much material as it
+ * needs, and those edges leave from the same handle by design.
+ */
+export function clearedFor(edges: CanvasEdge[], connection: Connection): CanvasEdge[] {
+  if (connection.sourceHandle === ContextHandle) return edges;
+  return edges.filter(
+    (edge) =>
+      edge.source !== connection.source ||
+      (edge.sourceHandle ?? null) !== (connection.sourceHandle ?? null),
+  );
+}
+
 function canvas(graph: FlowGraph) {
   return {
     nodes: graph.nodes.map((node) => ({
       id: node.id,
       type: "intel" as const,
       position: node.position,
-      data: { node },
+      data: node.kind === "condition" ? { node, branches: branchesOf(graph, node.id) } : { node },
     })),
     edges: graph.edges.map((edge) => {
       const context = edge.kind === "context";
@@ -397,6 +457,50 @@ function saveRefusalText(error: unknown, i18n: I18n): string {
   return i18n.t("flows.saveFailed");
 }
 
+/**
+ * Which sentence a refused PUBLISH is told with — #508 one surface further (#551).
+ *
+ * Publishing answers with at least eight different refusals: the compile rules of the save path,
+ * a link whose document is out of reach, a tool server that is gone, a frozen schema that moved,
+ * three rules about calling another flow — and all of them read
+ * "Publishing failed. Reload the latest version and try again." Reloading is the way out of exactly
+ * one of them, and for the rest it is the advice that costs the canvas and changes nothing.
+ *
+ * The split is therefore by what the answer IS, not by which code it carries:
+ *
+ * - **A refusal** (`4xx`) always shows the server's own sentence. It is the only party that knows
+ *   which step broke which rule, and since #508 it names that step by its label rather than by an
+ *   id — which is why #551 rewrote `flow_node_unavailable`, the one that still named a resource id.
+ * - **Two of them add the way out**, because the server's sentence identifies the step and stops
+ *   there: a document out of reach is answered by asking for access, and a tool server that is
+ *   gone by looking in the portal. Neither is something the API should prescribe per surface.
+ * - **A conflict** keeps the reload sentence, because there reloading IS the way out.
+ * - **Everything else** — a timeout, a `502`, a network that came back — says nothing about the
+ *   loaded version and is worth repeating, so it gets neither.
+ */
+function publishRefusalText(error: unknown, i18n: I18n): string {
+  const refusal = error instanceof IntelRequestError ? error : null;
+  // ⚠️ A `5xx` carries a sentence too, and showing it would dress a broken deployment up as a
+  // decision about this flow. Only the deliberate range speaks for itself.
+  if (refusal === null || refusal.status < 400 || refusal.status >= 500) {
+    return i18n.t("flows.publishFailed");
+  }
+  const detail = { detail: refusal.message };
+  switch (refusal.code) {
+    case "flow_node_unavailable":
+      return i18n.t("flows.publishNodeUnavailable", detail);
+    case "flow_tool_unavailable":
+      return i18n.t("flows.publishToolUnavailable", detail);
+    // The two ways the version being published stopped being the one to publish. Both are races
+    // against another editor, and the loaded version is genuinely stale afterwards.
+    case "flow_version_conflict":
+    case "flow_publish_conflict":
+      return i18n.t("flows.publishConflict");
+    default:
+      return i18n.t("flows.publishRefused", detail);
+  }
+}
+
 // ⚠️ The provider wraps the editor rather than sitting inside it: `useReactFlow` — which is how the
 // drop turns a screen point into a graph point — has to be called from a component UNDER it, and
 // the hook lives in the same component that renders the canvas.
@@ -690,7 +794,7 @@ function FlowsEditor() {
                           id: crypto.randomUUID(),
                           ...contextEdgeStyle(connection.sourceHandle === ContextHandle),
                         },
-                        current,
+                        clearedFor(current, connection),
                       ),
                     );
                   }}
@@ -1007,7 +1111,7 @@ function PublishPreview({
           </ul>
           {publish.isError && (
             <p role="alert" className="mt-4 text-sm text-destructive">
-              {i18n.t("flows.publishFailed")}
+              {publishRefusalText(publish.error, i18n)}
             </p>
           )}
           <button

package/src/i18n/de.json

@@ -48,8 +48,7 @@
   "tree.kind.attachment": "Datei",
   "tree.kind.table": "Tabelle",
   "tree.kind.flow": "Flow",
-  "tree.move.action": "Verschieben nach …",
-  "tree.move.hint": "oder ziehen",
+  "tree.move.rowHint": "Beweglich: diese Zeile auf einen Ordner ziehen, oder sie öffnen und Verschieben wählen.",
   "tree.move.title": "{title} verschieben",
   "tree.move.root": "Oberste Ebene",
   "tree.move.dropRoot": "Hier ablegen, um auf die oberste Ebene zu verschieben",
@@ -76,6 +75,7 @@
   "resource.archive": "Archivieren",
   "resource.columns": "Spalten",
   "resource.export": "Export",
+  "resource.exportExcludes": "Nimmt den aktuellen Stand mit. Frühere Versionen, Freigaben und Flow-Läufe bleiben zurück. Von einem veröffentlichten Flow reist der veröffentlichte Graph — spätere Änderungen am Entwurf bleiben zurück.",
   "resource.import": "Import",
   "resource.validate": "Prüfen",
   "resource.links": "Verweise",
@@ -102,12 +102,17 @@
   "archive.purge.links.one": "Ein anderes Dokument verweist darauf; dieser Verweis wird brechen.",
   "archive.purge.links.many": "{count} andere Dokumente verweisen darauf; diese Verweise werden brechen.",
   "archive.purge.grants": "Die Freigaben werden ebenfalls gelöscht.",
-  "archive.purge.items": "Damit werden insgesamt {count} Elemente endgültig gelöscht.",
+  "archive.purge.items": "Insgesamt endgültig gelöscht: {count}.",
   "archive.purge.previewLoading": "Verweise werden geprüft …",
   "archive.purge.previewFailed": "Die Verweise konnten nicht geprüft werden. Lade neu und versuche es vor dem Löschen erneut.",
   "archive.purge.confirm": "Endgültig löschen",
   "archive.purge.cancel": "Abbrechen",
   "archive.purgeFailed": "Es konnte nicht vollständig gelöscht werden. Lade neu und versuche es erneut.",
+  "archive.purgeInUse": "Es lässt sich noch nicht löschen, weil veröffentlichte Flows es weiterhin aufrufen.",
+  "archive.purgeInUseCallers": "Aufgerufen von: {titles}.",
+  "archive.purgeInUseCallersMore": "Und {count} weitere, die du nicht sehen kannst.",
+  "archive.purgeInUseCallersHidden": "Es wird noch von {count} aufgerufen, die du nicht sehen kannst.",
+  "archive.purgeInUseHint": "Ändere oder depubliziere sie zuerst.",
   "archive.archived": "Archiviert",
   "resource.conflict": "Nicht geändert: Jemand anderes hat diesen Eintrag zuerst geändert. Lade ihn neu und versuche es erneut.",
   "resource.forbidden": "Nicht geändert: Du darfst diesen Eintrag nicht ändern.",
@@ -154,6 +159,10 @@
   "node.shareOrganizationHint": "Jedes angemeldete Mitglied der Organisation bekommt diesen Zugriff, auch wer später dazukommt.",
   "node.shareLibraryWarning": "Ausführen für die ganze Organisation macht diesen Ordner zu einer Bibliothek: Flows von überall im Baum dürfen dann hineinrufen. Das Zurücknehmen wird abgelehnt, solange einer davon es noch tut.",
   "node.revokeInUse": "Dieser Zugriff lässt sich noch nicht zurücknehmen, weil Flows außerhalb dieses Ordners noch hineinrufen.",
+  "node.revokeInUseCallers": "Aufgerufen von: {titles}.",
+  "node.revokeInUseCallersMore": "Und {count} weitere, die du nicht sehen kannst.",
+  "node.revokeInUseCallersHidden": "Aufgerufen von {count}, die du nicht sehen kannst.",
+  "node.revokeInUseHint": "Ändere oder depubliziere sie, bevor du den Ordner enger machst.",
   "node.someUser": "Ein Benutzerkonto",
   "node.verbs": "Was diese Freigabe erlaubt",
   "node.verb.read": "Lesen",
@@ -173,9 +182,9 @@
   "node.revokeVerbFor": "{verb} für {recipient} entziehen",
   "node.revokeShare": "Zugriff entziehen",
   "node.shareFailed": "Der Zugriff wurde nicht geändert. Prüfe deine Berechtigung und versuche es erneut.",
-  "node.shareUnreadable": "Flows in diesem Ordner lesen Dokumente, die diese Freigabe nicht abdeckt: {titles}.",
-  "node.shareUnreadableMore": "{count} weitere liegen ebenfalls außer Reichweite, und du kannst sie nicht sehen.",
-  "node.shareUnreadableHidden": "{count} Dokumente, die Flows in diesem Ordner lesen, liegen mit dieser Freigabe außer Reichweite. Du kannst sie nicht sehen.",
+  "node.shareUnreadable": "Diese Freigabe deckt nicht ab, was Flows in diesem Ordner lesen: {titles}.",
+  "node.shareUnreadableMore": "Und {count} weitere, die du nicht sehen kannst.",
+  "node.shareUnreadableHidden": "Diese Freigabe deckt nicht alles ab, was Flows in diesem Ordner lesen: {count} davon kannst du nicht sehen.",
   "node.shareUnreadableHint": "Nichts ist blockiert. Ein Lauf dieser Flows hält für sie schlicht an dieser Stelle an.",
   "node.versions": "Versionsverlauf",
   "node.version": "Version {sequence}",
@@ -227,8 +236,7 @@
   "tools.outputSchema": "Ergebnisschema",
   "tools.destructiveShort": "Verändernd",
   "tools.destructiveCount": "{count} verändernd",
-  "tools.toolCount": "{count} Werkzeuge",
-  "tools.toolCountOne": "1 Werkzeug",
+  "tools.toolCount": "Werkzeuge: {count}",
   "tools.liveNote": "Diese Liste ist eine Live-Abfrage mit deinem eigenen Portal-Zugriff. Intel speichert weder die Werkzeuge noch, wer sie nutzen darf; beides entscheidet das Portal.",
   "flows.select": "Wähle einen Flow oder lege einen an, um den visuellen Editor zu öffnen.",
   "flows.inspect": "Wähle einen Schritt, um seine Konfiguration zu bearbeiten.",
@@ -290,7 +298,11 @@
   "flows.publishPreviewFollows": "läuft mit dem aufgerufenen Flow mit",
   "flows.publishPreviewUnavailable": "Der aufgerufene Flow hat noch nichts veröffentlicht, das lässt sich nicht einfrieren.",
   "flows.publishConfirm": "Veröffentlichen",
-  "flows.publishFailed": "Das Veröffentlichen ist fehlgeschlagen. Lade die neueste Fassung und versuche es erneut.",
+  "flows.publishFailed": "Das Veröffentlichen ist fehlgeschlagen. Versuche es erneut.",
+  "flows.publishRefused": "Nicht veröffentlicht: {detail}",
+  "flows.publishConflict": "Nicht veröffentlicht: Jemand anderes hat diesen Flow zuerst geändert. Lade die neueste Fassung und versuche es erneut.",
+  "flows.publishNodeUnavailable": "Nicht veröffentlicht: {detail}. Frag den Zugriff an oder lass den Schritt auf etwas anderes zeigen.",
+  "flows.publishToolUnavailable": "Nicht veröffentlicht: {detail}. Prüf im Portal, ob du diesen Server noch erreichst.",
   "flows.tool": "MCP-Server",
   "flows.selectTool": "Server auswählen",
   "flows.operationFailed": "Der Flow-Vorgang ist fehlgeschlagen. Lade die neueste Fassung und versuche es erneut.",
@@ -300,7 +312,7 @@
   "flows.needs": "Was dieser Flow braucht",
   "flows.needsNodes": "Dokumente",
   "flows.needsTools": "Werkzeuge",
-  "flows.needsInvalid": "{count} weitere, die es nicht mehr gibt — ersetze oder entferne diese Schritte",
+  "flows.needsInvalid": "Nicht mehr vorhanden: {count} — ersetze oder entferne jeden betroffenen Schritt",
   "flows.needsHidden": "{count} weitere, die du nicht sehen kannst",
   "flows.needsEmpty": "Dieser Flow liest keine Dokumente und ruft keine Werkzeuge auf.",
   "flows.needsFailed": "Was dieser Flow braucht, konnte nicht geladen werden.",
@@ -344,7 +356,7 @@
   "reindex.running": "Wird gesendet …",
   "reindex.cancel": "Abbrechen",
   "reindex.close": "Schließen",
-  "reindex.queued": "{count} Knoten sind eingereiht. Der Index zieht im Hintergrund nach; die Suche funktioniert währenddessen weiter.",
+  "reindex.queued": "Eingereiht: {count}. Der Index zieht im Hintergrund nach; die Suche funktioniert währenddessen weiter.",
   "reindex.failed": "Der Neuaufbau wurde nicht gestartet. Prüfe deine Berechtigung und versuche es noch einmal.",
   "auth.signOut": "Abmelden",
   "auth.signOutFailed": "Das Abmelden ist fehlgeschlagen. Prüfe deine Verbindung und versuche es erneut.",
@@ -381,18 +393,18 @@
   "flows.toolFunctions": "Funktionen",
   "flows.toolServersDisconnected": "Du bist nicht mit dem Portal verbunden, daher lässt sich kein Server wählen. Verbinde es zuerst in den Werkzeug-Einstellungen.",
   "flows.toolAllowNone": "Es ist noch keine Funktion ausgewählt, daher lässt sich dieser Schritt nicht veröffentlichen.",
-  "flows.toolAllowUnknown": "{count} ausgewählte Funktion(en) bietet dieser Server gerade nicht an.",
+  "flows.toolAllowUnknown": "Die Auswahl enthält, was dieser Server gerade nicht anbietet: {count}.",
   "flows.toolStepNeedsServer": "Dem Schritt „{label}“ fehlt noch ein Server.",
   "flows.toolFunctionsFailed": "Die Funktionsliste ließ sich nicht laden, daher ist die Auswahl möglicherweise unvollständig.",
   "flows.publishPreviewToolUnavailable": "Diesen Server erreichst du nicht, daher wird das Veröffentlichen abgelehnt.",
   "flows.publishPreviewToolAllow": "Eingefroren auf: {functions}",
-  "flow.shareUnreadable": "Dieser Flow liest Dokumente, die diese Freigabe nicht abdeckt: {titles}.",
-  "flow.shareUnreadableMore": "{count} weitere liegen ebenfalls außer Reichweite, und du kannst sie nicht sehen.",
-  "flow.shareUnreadableHidden": "{count} Dokumente, die dieser Flow liest, liegen mit dieser Freigabe außer Reichweite. Du kannst sie nicht sehen.",
+  "flow.shareUnreadable": "Diese Freigabe deckt nicht ab, was dieser Flow liest: {titles}.",
+  "flow.shareUnreadableMore": "Und {count} weitere, die du nicht sehen kannst.",
+  "flow.shareUnreadableHidden": "Diese Freigabe deckt nicht alles ab, was dieser Flow liest: {count} davon kannst du nicht sehen.",
   "flow.shareUnreadableHint": "Nichts ist blockiert. Ein Lauf hält für sie schlicht an dieser Stelle an.",
-  "flow.shareUnrunnable": "Dieser Flow ruft Flows auf, die diese Freigabe nicht abdeckt: {titles}.",
-  "flow.shareUnrunnableMore": "{count} weitere liegen ebenfalls außer Reichweite, und du kannst sie nicht sehen.",
-  "flow.shareUnrunnableHidden": "{count} Flows, die dieser aufruft, liegen mit dieser Freigabe außer Reichweite. Du kannst sie nicht sehen.",
+  "flow.shareUnrunnable": "Diese Freigabe deckt nicht ab, was dieser Flow aufruft: {titles}.",
+  "flow.shareUnrunnableMore": "Und {count} weitere, die du nicht sehen kannst.",
+  "flow.shareUnrunnableHidden": "Diese Freigabe deckt nicht alles ab, was dieser Flow aufruft: {count} davon kannst du nicht sehen.",
   "flow.shareUnrunnableHint": "Eine Freigabe auf einem Flow reicht nur bis zu diesem Flow. Gib die anderen ebenfalls frei oder den Ordner, in dem sie liegen. Mit „Prüfen“ sehen die Beschenkten es vor dem Start selbst.",
   "flow.verbHint.read": "Diesen Flow öffnen und lesen",
   "flow.verbHint.write": "Diesen Flow ändern",

package/src/i18n/en.json

@@ -48,8 +48,7 @@
   "tree.kind.attachment": "File",
   "tree.kind.table": "Table",
   "tree.kind.flow": "Flow",
-  "tree.move.action": "Move to…",
-  "tree.move.hint": "or drag",
+  "tree.move.rowHint": "Movable: drag this row onto a folder, or open it and choose Move.",
   "tree.move.title": "Move {title}",
   "tree.move.root": "Top level",
   "tree.move.dropRoot": "Drop here to move to the top level",
@@ -76,6 +75,7 @@
   "resource.archive": "Archive",
   "resource.columns": "Columns",
   "resource.export": "Export",
+  "resource.exportExcludes": "Carries the current state. Earlier versions, shares and flow runs stay behind. A published flow travels as its published graph — changes drafted since stay behind.",
   "resource.import": "Import",
   "resource.validate": "Check",
   "resource.links": "Links",
@@ -102,12 +102,17 @@
   "archive.purge.links.one": "One other document links to it and that link will break.",
   "archive.purge.links.many": "{count} other documents link to it and those links will break.",
   "archive.purge.grants": "Its shares will also be deleted.",
-  "archive.purge.items": "This permanently deletes {count} items in total.",
+  "archive.purge.items": "Deleted for good in total: {count}.",
   "archive.purge.previewLoading": "Checking links…",
   "archive.purge.previewFailed": "The links could not be checked. Reload and try again before deleting.",
   "archive.purge.confirm": "Delete for good",
   "archive.purge.cancel": "Cancel",
   "archive.purgeFailed": "It could not be deleted completely. Reload and try again.",
+  "archive.purgeInUse": "It cannot be deleted yet, because published flows still call it.",
+  "archive.purgeInUseCallers": "Still calling it: {titles}.",
+  "archive.purgeInUseCallersMore": "And {count} more you cannot see.",
+  "archive.purgeInUseCallersHidden": "It is still called by {count} you cannot see.",
+  "archive.purgeInUseHint": "Change or unpublish them first.",
   "archive.archived": "Archived",
   "resource.conflict": "It was not changed: somebody else changed this entry first. Reload it and try again.",
   "resource.forbidden": "It was not changed: you may not change this entry.",
@@ -154,6 +159,10 @@
   "node.shareOrganizationHint": "Every signed-in member of the organization gets this access, including people who join later.",
   "node.shareLibraryWarning": "Run for the whole organization makes this folder a library: flows anywhere in the tree may then call into it. Taking it back is refused while any of them still does.",
   "node.revokeInUse": "This access cannot be withdrawn yet, because flows outside this folder still call into it.",
+  "node.revokeInUseCallers": "Still calling into it: {titles}.",
+  "node.revokeInUseCallersMore": "And {count} more you cannot see.",
+  "node.revokeInUseCallersHidden": "It is still called by {count} you cannot see.",
+  "node.revokeInUseHint": "Change or unpublish them before narrowing the folder.",
   "node.someUser": "A user account",
   "node.verbs": "What this grant allows",
   "node.verb.read": "Read",
@@ -173,9 +182,9 @@
   "node.revokeVerbFor": "Revoke {verb} for {recipient}",
   "node.revokeShare": "Revoke access",
   "node.shareFailed": "Access was not changed. Check your permission and try again.",
-  "node.shareUnreadable": "Flows in this folder read documents this grant does not cover: {titles}.",
-  "node.shareUnreadableMore": "{count} more are out of reach too, and you cannot see them.",
-  "node.shareUnreadableHidden": "{count} documents that flows in this folder read are out of reach with this grant. You cannot see them.",
+  "node.shareUnreadable": "This grant does not cover what flows in this folder read: {titles}.",
+  "node.shareUnreadableMore": "And {count} more you cannot see.",
+  "node.shareUnreadableHidden": "This grant does not cover everything flows in this folder read: {count} you cannot see.",
   "node.shareUnreadableHint": "Nothing is blocked. A run of those flows will simply stop at that step for them.",
   "node.versions": "Version history",
   "node.version": "Version {sequence}",
@@ -227,8 +236,7 @@
   "tools.outputSchema": "Result schema",
   "tools.destructiveShort": "Destructive",
   "tools.destructiveCount": "{count} destructive",
-  "tools.toolCount": "{count} tools",
-  "tools.toolCountOne": "1 tool",
+  "tools.toolCount": "Tools: {count}",
   "tools.liveNote": "This list is a live query with your own portal access. Intel stores neither the tools nor who may use them; the portal decides both.",
   "flows.select": "Select a flow or create one to open the visual editor.",
   "flows.inspect": "Select a node to edit its configuration.",
@@ -290,7 +298,11 @@
   "flows.publishPreviewFollows": "runs along with the called flow",
   "flows.publishPreviewUnavailable": "The called flow has published nothing yet, so this cannot be frozen.",
   "flows.publishConfirm": "Publish",
-  "flows.publishFailed": "Publishing failed. Reload the latest version and try again.",
+  "flows.publishFailed": "Publishing failed. Try again.",
+  "flows.publishRefused": "Not published: {detail}",
+  "flows.publishConflict": "Not published: somebody else changed this flow first. Reload the latest version and try again.",
+  "flows.publishNodeUnavailable": "Not published: {detail}. Ask for access to it, or point the step at something else.",
+  "flows.publishToolUnavailable": "Not published: {detail}. Check in the portal whether you still reach that server.",
   "flows.tool": "MCP server",
   "flows.selectTool": "Select a server",
   "flows.operationFailed": "The flow operation failed. Reload the latest version and try again.",
@@ -300,7 +312,7 @@
   "flows.needs": "What this flow needs",
   "flows.needsNodes": "Documents",
   "flows.needsTools": "Tools",
-  "flows.needsInvalid": "{count} more that no longer exist — replace or remove those steps",
+  "flows.needsInvalid": "No longer there: {count} — replace or remove every affected step",
   "flows.needsHidden": "{count} more you cannot see",
   "flows.needsEmpty": "This flow reads no documents and calls no tools.",
   "flows.needsFailed": "What this flow needs could not be loaded.",
@@ -344,7 +356,7 @@
   "reindex.running": "Sending…",
   "reindex.cancel": "Cancel",
   "reindex.close": "Close",
-  "reindex.queued": "{count} nodes are queued. The index catches up in the background; searching keeps working meanwhile.",
+  "reindex.queued": "Queued: {count}. The index catches up in the background; searching keeps working meanwhile.",
   "reindex.failed": "The rebuild was not started. Check your access and try again.",
   "auth.signOut": "Sign out",
   "auth.signOutFailed": "Signing out failed. Check your connection and try again.",
@@ -381,18 +393,18 @@
   "flows.toolFunctions": "Functions",
   "flows.toolServersDisconnected": "You are not connected to the portal, so no server can be chosen. Connect it in the tool settings first.",
   "flows.toolAllowNone": "No function is selected yet, so this step cannot be published.",
-  "flows.toolAllowUnknown": "{count} selected function(s) are not offered by this server right now.",
+  "flows.toolAllowUnknown": "The selection includes what this server does not offer right now: {count}.",
   "flows.toolStepNeedsServer": "The step “{label}” still needs a server.",
   "flows.toolFunctionsFailed": "The list of functions could not be loaded, so the selection may be incomplete.",
   "flows.publishPreviewToolUnavailable": "You do not reach this server, so publishing will be refused.",
   "flows.publishPreviewToolAllow": "Frozen to: {functions}",
-  "flow.shareUnreadable": "This flow reads documents this grant does not cover: {titles}.",
-  "flow.shareUnreadableMore": "{count} more are out of reach too, and you cannot see them.",
-  "flow.shareUnreadableHidden": "{count} documents this flow reads are out of reach with this grant. You cannot see them.",
+  "flow.shareUnreadable": "This grant does not cover what this flow reads: {titles}.",
+  "flow.shareUnreadableMore": "And {count} more you cannot see.",
+  "flow.shareUnreadableHidden": "This grant does not cover everything this flow reads: {count} you cannot see.",
   "flow.shareUnreadableHint": "Nothing is blocked. A run will simply stop at that step for them.",
-  "flow.shareUnrunnable": "This flow calls flows this grant does not cover: {titles}.",
-  "flow.shareUnrunnableMore": "{count} more are out of reach too, and you cannot see them.",
-  "flow.shareUnrunnableHidden": "{count} flows this one calls are out of reach with this grant. You cannot see them.",
+  "flow.shareUnrunnable": "This grant does not cover what this flow calls: {titles}.",
+  "flow.shareUnrunnableMore": "And {count} more you cannot see.",
+  "flow.shareUnrunnableHidden": "This grant does not cover everything this flow calls: {count} you cannot see.",
   "flow.shareUnrunnableHint": "A grant on one flow reaches that flow alone. Share those flows too, or share the folder they are filed in. Let them check with Validate before they run it.",
   "flow.verbHint.read": "Open this flow and read it",
   "flow.verbHint.write": "Change this flow",

package/src/i18n/es.json

@@ -48,8 +48,7 @@
   "tree.kind.attachment": "Archivo",
   "tree.kind.table": "Tabla",
   "tree.kind.flow": "Flujo",
-  "tree.move.action": "Mover a…",
-  "tree.move.hint": "o arrastra",
+  "tree.move.rowHint": "Movible: arrastra esta fila a una carpeta, o ábrela y elige Mover.",
   "tree.move.title": "Mover {title}",
   "tree.move.root": "Nivel superior",
   "tree.move.dropRoot": "Suelta aquí para mover al nivel superior",
@@ -76,6 +75,7 @@
   "resource.archive": "Archivar",
   "resource.columns": "Columnas",
   "resource.export": "Exportar",
+  "resource.exportExcludes": "Se lleva el estado actual. Las versiones anteriores, los permisos y las ejecuciones de flujo se quedan. Un flujo publicado viaja con su grafo publicado; los cambios redactados después se quedan.",
   "resource.import": "Importar",
   "resource.validate": "Comprobar",
   "resource.links": "Enlaces",
@@ -102,12 +102,17 @@
   "archive.purge.links.one": "Otro documento contiene un enlace a este elemento y ese enlace dejará de funcionar.",
   "archive.purge.links.many": "Otros {count} documentos contienen enlaces a este elemento y dejarán de funcionar.",
   "archive.purge.grants": "Sus permisos compartidos también se eliminarán.",
-  "archive.purge.items": "Esto elimina definitivamente {count} elementos en total.",
+  "archive.purge.items": "Eliminado definitivamente en total: {count}.",
   "archive.purge.previewLoading": "Comprobando enlaces…",
   "archive.purge.previewFailed": "No se pudieron comprobar los enlaces. Recarga e inténtalo de nuevo antes de eliminar.",
   "archive.purge.confirm": "Eliminar definitivamente",
   "archive.purge.cancel": "Cancelar",
   "archive.purgeFailed": "No se pudo eliminar por completo. Recarga e inténtalo de nuevo.",
+  "archive.purgeInUse": "Todavía no se puede eliminar, porque hay flujos publicados que siguen invocándolo.",
+  "archive.purgeInUseCallers": "Invocado por: {titles}.",
+  "archive.purgeInUseCallersMore": "Y {count} más que no puedes ver.",
+  "archive.purgeInUseCallersHidden": "Todavía lo invocan {count} que no puedes ver.",
+  "archive.purgeInUseHint": "Cámbialos o retira su publicación primero.",
   "archive.archived": "Archivado",
   "resource.conflict": "No se ha cambiado: otra persona ha cambiado esta entrada antes. Recárgala e inténtalo de nuevo.",
   "resource.forbidden": "No se ha cambiado: no puedes cambiar esta entrada.",
@@ -154,6 +159,10 @@
   "node.shareOrganizationHint": "Todos los miembros de la organización que hayan iniciado sesión obtienen este acceso, incluidos quienes se incorporen más tarde.",
   "node.shareLibraryWarning": "Ejecutar para toda la organización convierte esta carpeta en una biblioteca: los flujos de cualquier parte del árbol podrán invocarla. Retirarlo se rechaza mientras alguno siga haciéndolo.",
   "node.revokeInUse": "Este acceso todavía no se puede retirar, porque hay flujos fuera de esta carpeta que siguen invocándola.",
+  "node.revokeInUseCallers": "Invocada por: {titles}.",
+  "node.revokeInUseCallersMore": "Y {count} más que no puedes ver.",
+  "node.revokeInUseCallersHidden": "Invocada por {count} que no puedes ver.",
+  "node.revokeInUseHint": "Cámbialos o retira su publicación antes de restringir la carpeta.",
   "node.someUser": "Una cuenta de usuario",
   "node.verbs": "Qué permite este acceso",
   "node.verb.read": "Leer",
@@ -173,9 +182,9 @@
   "node.revokeVerbFor": "Retirar {verb} a {recipient}",
   "node.revokeShare": "Retirar el acceso",
   "node.shareFailed": "El acceso no se ha cambiado. Comprueba tu permiso e inténtalo de nuevo.",
-  "node.shareUnreadable": "Los flujos de esta carpeta leen documentos que este acceso no cubre: {titles}.",
-  "node.shareUnreadableMore": "{count} más también quedan fuera de alcance, y no puedes verlos.",
-  "node.shareUnreadableHidden": "{count} documentos que leen los flujos de esta carpeta quedan fuera de alcance con este acceso. No puedes verlos.",
+  "node.shareUnreadable": "Este acceso no cubre lo que leen los flujos de esta carpeta: {titles}.",
+  "node.shareUnreadableMore": "Y {count} más que no puedes ver.",
+  "node.shareUnreadableHidden": "Este acceso no cubre todo lo que leen los flujos de esta carpeta: {count} que no puedes ver.",
   "node.shareUnreadableHint": "No se bloquea nada. Una ejecución de esos flujos simplemente se detendrá en ese paso para esa persona.",
   "node.versions": "Historial de versiones",
   "node.version": "Versión {sequence}",
@@ -227,8 +236,7 @@
   "tools.outputSchema": "Esquema del resultado",
   "tools.destructiveShort": "Destructiva",
   "tools.destructiveCount": "{count} destructivas",
-  "tools.toolCount": "{count} herramientas",
-  "tools.toolCountOne": "1 herramienta",
+  "tools.toolCount": "Herramientas: {count}",
   "tools.liveNote": "Esta lista es una consulta en vivo con tu propio acceso al portal. Intel no guarda ni las herramientas ni quién puede usarlas; ambas cosas las decide el portal.",
   "flows.select": "Elige un flujo o crea uno para abrir el editor visual.",
   "flows.inspect": "Elige un paso para editar su configuración.",
@@ -290,7 +298,11 @@
   "flows.publishPreviewFollows": "va con el flujo llamado",
   "flows.publishPreviewUnavailable": "El flujo llamado todavía no ha publicado nada, así que esto no se puede congelar.",
   "flows.publishConfirm": "Publicar",
-  "flows.publishFailed": "La publicación ha fallado. Carga la versión más reciente e inténtalo de nuevo.",
+  "flows.publishFailed": "La publicación ha fallado. Inténtalo de nuevo.",
+  "flows.publishRefused": "No se ha publicado: {detail}",
+  "flows.publishConflict": "No se ha publicado: otra persona ha cambiado este flujo antes. Carga la versión más reciente e inténtalo de nuevo.",
+  "flows.publishNodeUnavailable": "No se ha publicado: {detail}. Pide acceso a él o haz que el paso apunte a otra cosa.",
+  "flows.publishToolUnavailable": "No se ha publicado: {detail}. Comprueba en el portal si todavía alcanzas ese servidor.",
   "flows.tool": "Servidor MCP",
   "flows.selectTool": "Elegir un servidor",
   "flows.operationFailed": "La operación del flujo ha fallado. Carga la versión más reciente e inténtalo de nuevo.",
@@ -300,7 +312,7 @@
   "flows.needs": "Qué necesita este flujo",
   "flows.needsNodes": "Documentos",
   "flows.needsTools": "Herramientas",
-  "flows.needsInvalid": "{count} más que ya no existen — sustituye o quita esos pasos",
+  "flows.needsInvalid": "Lo que ya no está: {count} — sustituye o quita cada paso afectado",
   "flows.needsHidden": "{count} más que no puedes ver",
   "flows.needsEmpty": "Este flujo no lee ningún documento ni llama a ninguna herramienta.",
   "flows.needsFailed": "Lo que necesita este flujo no se ha podido cargar.",
@@ -344,7 +356,7 @@
   "reindex.running": "Enviando…",
   "reindex.cancel": "Cancelar",
   "reindex.close": "Cerrar",
-  "reindex.queued": "{count} nodos están en cola. El índice se pone al día en segundo plano; mientras tanto la búsqueda sigue funcionando.",
+  "reindex.queued": "En cola: {count}. El índice se pone al día en segundo plano; mientras tanto la búsqueda sigue funcionando.",
   "reindex.failed": "No se inició la reconstrucción. Comprueba tu acceso e inténtalo de nuevo.",
   "auth.signOut": "Cerrar sesión",
   "auth.signOutFailed": "El cierre de sesión ha fallado. Comprueba tu conexión e inténtalo de nuevo.",
@@ -381,18 +393,18 @@
   "flows.toolFunctions": "Funciones",
   "flows.toolServersDisconnected": "No estás conectado al portal, así que no se puede elegir ningún servidor. Conéctalo primero en la configuración de herramientas.",
   "flows.toolAllowNone": "Todavía no hay ninguna función seleccionada, así que este paso no se puede publicar.",
-  "flows.toolAllowUnknown": "Este servidor no ofrece ahora mismo {count} función(es) seleccionada(s).",
+  "flows.toolAllowUnknown": "La selección incluye lo que este servidor no ofrece ahora mismo: {count}.",
   "flows.toolStepNeedsServer": "Al paso «{label}» todavía le falta un servidor.",
   "flows.toolFunctionsFailed": "No se pudo cargar la lista de funciones, así que la selección puede estar incompleta.",
   "flows.publishPreviewToolUnavailable": "No alcanzas este servidor, así que la publicación será rechazada.",
   "flows.publishPreviewToolAllow": "Congelado en: {functions}",
-  "flow.shareUnreadable": "Este flujo lee documentos que este acceso no cubre: {titles}.",
-  "flow.shareUnreadableMore": "{count} más también quedan fuera de alcance, y no puedes verlos.",
-  "flow.shareUnreadableHidden": "{count} documentos que lee este flujo quedan fuera de alcance con este acceso. No puedes verlos.",
+  "flow.shareUnreadable": "Este acceso no cubre lo que lee este flujo: {titles}.",
+  "flow.shareUnreadableMore": "Y {count} más que no puedes ver.",
+  "flow.shareUnreadableHidden": "Este acceso no cubre todo lo que lee este flujo: {count} que no puedes ver.",
   "flow.shareUnreadableHint": "No se bloquea nada. Una ejecución simplemente se detendrá en ese paso para esa persona.",
-  "flow.shareUnrunnable": "Este flujo llama a flujos que este acceso no cubre: {titles}.",
-  "flow.shareUnrunnableMore": "{count} más también quedan fuera de alcance, y no puedes verlos.",
-  "flow.shareUnrunnableHidden": "{count} flujos a los que llama este quedan fuera de alcance con este acceso. No puedes verlos.",
+  "flow.shareUnrunnable": "Este acceso no cubre lo que invoca este flujo: {titles}.",
+  "flow.shareUnrunnableMore": "Y {count} más que no puedes ver.",
+  "flow.shareUnrunnableHidden": "Este acceso no cubre todo lo que invoca este flujo: {count} que no puedes ver.",
   "flow.shareUnrunnableHint": "Un acceso sobre un flujo llega solo a ese flujo. Comparte también esos flujos, o la carpeta donde están. Con «Validar» lo verán ellos mismos antes de ejecutarlo.",
   "flow.verbHint.read": "Abrir este flujo y leerlo",
   "flow.verbHint.write": "Cambiar este flujo",

package/src/resource-menu/resource-menu.tsx

@@ -18,7 +18,7 @@ import {
   ShieldCheck,
 } from "lucide-react";
 import type * as React from "react";
-import { useState } from "react";
+import { useId, useState } from "react";
 import { AccessSummary } from "@/access-summary/access-summary.tsx";
 import { allTreeLevelsKey, moveErrorKey, useTreeMove } from "@/app/tree-move/tree-move.tsx";
 import {
@@ -154,6 +154,11 @@ export function ResourceMenu({
   // nowhere else: a person had strictly less reach on their own table than a model did.
   const isTable = node !== null && node.kind === "table";
   const bundleImport = useBundleImport({ where: title });
+  // ⚠️ Per instance, not a constant: the folder table renders one menu PER ROW, so a fixed id would
+  // put the same `id` in the document twenty times and every entry's name would resolve to the
+  // first one's.
+  const exportLabelId = useId();
+  const exportHintId = useId();
 
   // Everything a change here can make stale. The row sits in one level of the tree, the open screen
   // reads the record, and the flat collections behind the search, the link picker and the relation
@@ -316,10 +321,40 @@ export function ResourceMenu({
               ⚠️ The one case where they differed is the table that has no header yet: `downloadCsv`
               refused it out loud, `tableCsv` joins no segments and writes a file of zero bytes
               (#534). That is the export's gap on every kind it can hit, not something this entry
-              was covering — which is why it is fixed there and not by keeping a second entry. */}
-          <DropdownMenuItem onSelect={() => exportBundle.mutate()}>
-            <FolderDown aria-hidden="true" />
-            {i18n.t("resource.export")}
+              was covering — which is why it is fixed there and not by keeping a second entry.
+
+              ⚠️ The second line is not decoration and it belongs HERE rather than after the click
+              (#433, ADR-0006). A bundle carries one version per node; whoever moves an installation
+              this way loses every earlier one, and until now the only place that said so was
+              `excluded` in a `manifest.json` inside the zip — read, if ever, long after the source
+              installation is gone. A loss that cannot be undone has to be readable BEFORE the
+              gesture, and a menu item is where this gesture is chosen.
+
+              ⚠️ Its third clause is the flow half (#585), and it is a DIFFERENT loss from the first
+              two rather than an example of them: a published flow travels as its published graph,
+              so edits drafted since do not travel at all. Those edits are not an earlier version —
+              they are the newest state there is, and somebody reading only "earlier versions stay
+              behind" would expect the opposite of what happens. `Excluded` in `bundle.ts` names it
+              with a word of its own for the same reason.
+
+              ⚠️ It is the entry's DESCRIPTION, not part of its name: `aria-labelledby` keeps the
+              name at the one word every other entry here uses, and `aria-describedby` is what a
+              screen reader reads after it. Folding a whole sentence into the name would make this
+              the only entry in the menu somebody has to listen through to know what it does — and
+              the sentence is a condition of the action, which is what a description is for. */}
+          <DropdownMenuItem
+            className="items-start"
+            aria-labelledby={exportLabelId}
+            aria-describedby={exportHintId}
+            onSelect={() => exportBundle.mutate()}
+          >
+            <FolderDown aria-hidden="true" className="mt-0.5" />
+            <span className="flex flex-col gap-0.5">
+              <span id={exportLabelId}>{i18n.t("resource.export")}</span>
+              <span id={exportHintId} className="text-xs text-muted-foreground">
+                {i18n.t("resource.exportExcludes")}
+              </span>
+            </span>
           </DropdownMenuItem>
           {/* The other half of the same round trip, next to it rather than in the tree's plus
               (#346): one word in the menu, both sources under it. */}
@@ -491,31 +526,23 @@ function VersionHistory({ target, close }: { target: ResourceTarget; close(): vo
       }));
     },
   });
+  // ⚠️ A Modal, like every other panel in this menu — NOT an `absolute` drawer. `absolute` measures
+  // against the nearest positioned ancestor, and this menu has no say in what that is: on the title
+  // line it is the title row (`title-row.tsx`, `relative z-10`, around 100px tall), which clipped
+  // the list to its first entry on every viewport; in the folder listing it is the table container
+  // (`table.tsx`, `relative … overflow-x-auto`), which clips it differently again (#628). The list
+  // scrolls INSIDE the dialog instead, the way `NodeLinksPanel` further down does it.
   return (
-    <aside
-      aria-label={i18n.t("node.versions")}
-      className="absolute bottom-0 right-0 top-0 z-10 w-80 overflow-y-auto border-l bg-card p-5 shadow-xl"
-    >
-      <div className="flex items-start justify-between gap-4">
-        <h3 className="font-semibold">{i18n.t("node.versions")}</h3>
-        <button
-          type="button"
-          onClick={close}
-          aria-label={i18n.t("common.close")}
-          className="rounded-md px-2 py-1 text-muted-foreground outline-none hover:bg-muted focus-visible:ring-2 focus-visible:ring-ring"
-        >
-          ×
-        </button>
-      </div>
+    <Modal title={i18n.t("node.versions")} close={close}>
       {versions.isPending ? (
-        <p className="mt-4 text-sm text-muted-foreground">{i18n.t("common.loading")}</p>
+        <p className="text-sm text-muted-foreground">{i18n.t("common.loading")}</p>
       ) : null}
       {versions.isError ? (
-        <p role="alert" className="mt-4 text-sm text-destructive">
+        <p role="alert" className="text-sm text-destructive">
           {i18n.t(target.type === "flow" ? "flows.operationFailed" : "node.operationFailed")}
         </p>
       ) : null}
-      <ol className="mt-4 space-y-3">
+      <ol className="max-h-72 space-y-3 overflow-y-auto">
         {versions.data?.map((version) => (
           <li key={version.id} className="rounded-md border p-3 text-sm">
             <span className="font-medium">
@@ -528,7 +555,7 @@ function VersionHistory({ target, close }: { target: ResourceTarget; close(): vo
           </li>
         ))}
       </ol>
-    </aside>
+    </Modal>
   );
 }
 
@@ -787,27 +814,41 @@ function SharePanel({ target, close }: { target: ResourceTarget; close(): void }
    *
    * ⚠️ Taking back `organization` + `execute` on a folder is refused with `409
    * folder_execute_in_use` while flows from outside still call into it (`nodes.ts`,
-   * `revokeGrant`) — and the refusal's `detail` is the only place the CALLERS are named. Rendering
-   * it as the generic "access was not changed" threw exactly that away and left the reader with a
-   * dialog that refuses and will not say why, for the one grant that is hardest to undo.
+   * `revokeGrant`), and the CALLERS are what makes that refusal actionable. Rendering it as the
+   * generic "access was not changed" threw exactly that away and left the reader with a dialog that
+   * refuses and will not say why, for the one grant that is hardest to undo.
    *
-   * ⚠️ The server's own words, on purpose. `callersDetail` names the flows this actor may see and
-   * only COUNTS the rest, so it is actionable without becoming a directory of the tree — a
-   * translated stand-in would either lose the names or need them separately, and the wire carries
-   * prose rather than a list (#448). The lead-in sentence above it is translated; this line is the
-   * evidence under it.
+   * ⚠️ Since #448 they arrive as data — the flows this actor may see by name, the rest as a count —
+   * so the sentence is written here, in the reader's language, exactly like the `shareUnreadable`
+   * warning below it. The server still decides WHICH of them may be named; that is an authorization
+   * answer and nothing on this side recomputes it.
    */
-  const revokeInUse =
-    revoke.error instanceof IntelRequestError && revoke.error.code === "folder_execute_in_use"
-      ? revoke.error.message
-      : null;
+  const revokeError = revoke.error instanceof IntelRequestError ? revoke.error : null;
+  const revokeInUse = revokeError?.code === "folder_execute_in_use" ? revokeError : null;
 
   return (
     <Modal title={i18n.t("node.share")} close={close}>
       {revokeInUse ? (
         <div role="alert" className="mb-4 space-y-1 text-sm text-destructive">
           <p>{i18n.t("node.revokeInUse")}</p>
-          <p className="text-xs">{revokeInUse}</p>
+          {/* An API that predates #448 sends no `callers`, and its sentence is then the only place
+              the names exist at all. Showing it beats showing nothing — losing the titles is the
+              failure this ticket is about. */}
+          {revokeInUse.callers === null ? (
+            <p className="text-xs">{revokeInUse.message}</p>
+          ) : (
+            <p className="text-xs">
+              {revokeInUse.callers.titles.length > 0
+                ? i18n.t("node.revokeInUseCallers", {
+                    titles: revokeInUse.callers.titles.join(", "),
+                  })
+                : i18n.t("node.revokeInUseCallersHidden", { count: revokeInUse.callers.hidden })}
+              {revokeInUse.callers.titles.length > 0 && revokeInUse.callers.hidden > 0
+                ? ` ${i18n.t("node.revokeInUseCallersMore", { count: revokeInUse.callers.hidden })}`
+                : ""}
+              {` ${i18n.t("node.revokeInUseHint")}`}
+            </p>
+          )}
         </div>
       ) : (
         (share.isError || revoke.isError || grants.isError) && (

package/src/tools/tools.tsx

@@ -415,10 +415,11 @@ function ServerGroup({
   // with it — otherwise Enter on a hit lands on a screen where nothing happened.
   const holdsRequested = group.items.some((item) => item.name === requested);
   const destructive = group.items.filter((item) => item.annotations.destructiveHint).length;
-  const count =
-    group.items.length === 1
-      ? i18n.t("tools.toolCountOne")
-      : i18n.t("tools.toolCount", { count: group.items.length });
+  // ⚠️ One key, not a `…One` beside a `…Many` (#605): the catalog carries a wording that fits every
+  // number, so nothing here branches on the count. The branch that used to stand here is what the
+  // rule in `packages/ui/CLAUDE.md` forbids — it puts the inflection into the component and into
+  // every future language.
+  const count = i18n.t("tools.toolCount", { count: group.items.length });
   // The badges beside the name read as one run-on word when a screen reader concatenates them
   // ("wiki1 tool"), so the control says its own name instead of being read off its contents.
   const spoken = [`${i18n.t("tools.origin")}: ${group.label}`, count];