@newheap/platform-ai-chat 0.14.0 → 0.15.0

package/i18n/en.json

@@ -12,6 +12,8 @@
       "open": "Open proposals: {{open}}.",
       "working": "An agent is working on this."
     },
+    "account-id": "account ID {{id}}",
+    "account-id-title": "Account ID: {{id}}",
     "panel": {
       "title": "Assistant",
       "region-label": "Assistant panel",
@@ -236,7 +238,9 @@
       "assistant-proposal-stale": "Not run: the proposal no longer applied.",
       "assistant-proposal-execution-failed": "The approved proposal could not be run.",
       "assistant-proposal-already-open": "Not proposed again: the same proposal already waits.",
-      "assistant-proposal-recently-rejected": "Not proposed again: people rejected it recently."
+      "assistant-proposal-recently-rejected": "Not proposed again: people rejected it recently.",
+      "assistant-proposal-placed": "Proposed at its object; waits for that object's approvers",
+      "assistant-proposal-not-placed": "Not proposed: the object it concerns does not accept it."
     },
     "errors": {
       "generic": "Something went wrong. Please try again.",
@@ -255,6 +259,16 @@
       "assistant-mcp-host-blocked": "This host is not allowed for MCP servers or for forwarding the user's token.",
       "assistant-mcp-schema-changed": "The tool's input changed on the server. Review it and enable it again.",
       "assistant-mcp-tool-disabled": "This tool is disabled.",
+      "assistant-mcp-insufficient-scope": "The MCP server accepted the credentials, but they lack a permission this action needs.",
+      "assistant-mcp-headless-not-allowed": "This MCP server may not be used in background runs.",
+      "assistant-mcp-credential-mismatch": "The MCP call was not sent because it was authorized for someone other than the person whose token the connection carries.",
+      "assistant-mcp-consent-required": "The person this background run acts for has not allowed this MCP server with their own account.",
+      "assistant-mcp-initiator-only": "A run someone asked for uses only that person's own connection to this MCP server, and this run acts for someone else.",
+      "assistant-mcp-delegated-token-unavailable": "No short-lived token could be issued for the person this background run acts for.",
+      "assistant-mcp-secret-reference-invalid": "The secret reference names no available secret. Check the prefix and the name.",
+      "assistant-mcp-certificate-reference-invalid": "The client certificate is not configured or has no private key.",
+      "assistant-mcp-secret-unreadable": "A stored secret of this server can no longer be read. An administrator enters it again.",
+      "assistant-mcp-secret-unavailable": "The secret of this server could not be read just now. Please try again.",
       "assistant-instructions-too-long": "The text is too long. Shorten it to at most 20,000 characters.",
       "assistant-context-not-found": "The application context was not found. Reload the page.",
       "assistant-mcp-server-not-found": "The MCP server no longer exists. Reload the list.",
@@ -296,8 +310,11 @@
       "assistant-push-unavailable": "Desktop notifications are not available.",
       "assistant-push-subscription-invalid": "This browser could not be registered for notifications.",
       "assistant-conversation-removed": "This conversation is no longer available to you.",
-      "assistant-subject-not-found": "The subject no longer exists.",
+      "assistant-subject-not-found": "This object does not exist, or you may not see it.",
+      "assistant-subject-invalid": "This is not a valid reference to an object. Check the kind of object and its id.",
       "assistant-subject-type-unknown": "This kind of subject is not known to the assistant.",
+      "assistant-subject-search-unavailable": "This kind of object cannot be searched; give its id.",
+      "assistant-agent-does-not-work-on": "This agent does not work on this kind of object.",
       "assistant-subject-access-denied": "Your role on this subject does not allow this.",
       "assistant-no-accountable-owner": "Nobody answers for this agent on this subject.",
       "assistant-agent-disabled": "This agent has been stopped.",
@@ -322,6 +339,12 @@
       "assistant-agent-not-configured": "This agent cannot run on its own.",
       "assistant-run-not-found": "The run was not found.",
       "assistant-run-not-retryable": "This run cannot be retried.",
+      "assistant-run-filter-invalid": "The filter of the runs is not valid.",
+      "assistant-run-operation-cancelled": "The run was cancelled because its background operation was cancelled.",
+      "assistant-run-operation-stalled": "The run failed because no worker started its background operation.",
+      "assistant-run-operation-ended": "The run failed because its background operation ended before the run finished.",
+      "assistant-board-not-found": "This board does not exist, or you may not see any of its agents.",
+      "assistant-board-scope-invalid": "The division of the board is not valid.",
       "assistant-approval-policy-denied": "You may not decide this proposal.",
       "assistant-four-eyes-required": "Someone other than the person who started this must decide it.",
       "assistant-execution-not-uncertain": "This execution is not waiting to be resolved.",
@@ -332,8 +355,11 @@
       "assistant-proposal-superseded": "A newer proposal replaced this one.",
       "assistant-proposal-refused": "This action cannot be proposed by an automatic rule.",
       "assistant-trigger-not-found": "The trigger was not found.",
+      "assistant-trigger-rate-limited": "This agent already ran as often as it may today for this object. Try again later.",
+      "assistant-trigger-rolled-back": "The run could not be queued. Please try again.",
       "assistant-webhook-signature-invalid": "The webhook call has no valid signature.",
       "assistant-webhook-payload-invalid": "The webhook call could not be read.",
+      "assistant-webhook-payload-too-large": "The webhook call is larger than allowed.",
       "assistant-memory-not-configured": "This agent keeps no working memory.",
       "assistant-memory-invalid": "The working memory change does not fit its schema.",
       "assistant-memory-conflict": "The working memory changed at the same time.",
@@ -361,7 +387,27 @@
       "assistant-run-settings-in-code": "This agent is part of the code; its runs are configured there.",
       "assistant-run-settings-in-use": "Skills or triggers still belong to this agent. Remove them first.",
       "assistant-skill-candidate-not-found": "This skill has no version being evaluated in shadow.",
-      "assistant-skill-version-gone": "The skill version this run was for is no longer evaluated."
+      "assistant-skill-version-gone": "The skill version this run was for is no longer evaluated.",
+      "assistant-account-search-unavailable": "The application offers no account search; enter the account's id.",
+      "assistant-mcp-connection-required": "This server needs a connection first. Connect it and try again.",
+      "assistant-mcp-reauthorization-required": "The connection to this server ended. Connect again to continue.",
+      "assistant-mcp-scope-not-allowed": "The server asks for permissions that the administrator did not allow.",
+      "assistant-mcp-authorization-failed": "The authorization was not given. Try again, or ask the server's administrator.",
+      "assistant-mcp-authorization-expired": "The authorization took too long or was already used. Start again.",
+      "assistant-mcp-authorization-invalid": "The authorization could not be verified. Start again.",
+      "assistant-mcp-discovery-failed": "The server's authorization details could not be read or do not match the server.",
+      "assistant-mcp-pkce-unsupported": "The authorization server does not support the required protection (PKCE with S256).",
+      "assistant-mcp-client-registration-required": "The host is not registered at the authorization server. Enter a client id from the server's administrator.",
+      "assistant-mcp-token-request-failed": "The authorization server did not answer as expected. Try again later.",
+      "assistant-mcp-issuer-changed": "The server now uses another authorization server. An administrator has to confirm it before it is used.",
+      "assistant-mcp-authorization-not-confirmed": "An administrator has to confirm the server's authorization server first.",
+      "assistant-mcp-oauth-not-configured": "The application has no OAuth redirect address for MCP servers. Ask the developers to configure it.",
+      "assistant-mcp-too-many-authorizations": "Too many authorizations are still open. Finish or wait for them, then try again.",
+      "assistant-mcp-connection-not-supported": "This server has no connection of this kind.",
+      "assistant-mcp-authorization-cancelled": "The authorization window was closed before it finished.",
+      "assistant-mcp-popup-blocked": "The browser blocked the authorization window. Allow pop-ups for this site and try again.",
+      "assistant-proposal-placed": "The proposal waits at the object it concerns, for that object's approvers.",
+      "assistant-proposal-not-placed": "The proposal was not placed at the object it concerns."
     },
     "notices": {
       "no-answer": "The assistant finished without an answer. Try again or rephrase your question.",
@@ -411,6 +457,33 @@
         "blocked": "Your browser blocks notifications for this site. Allow them in the browser settings.",
         "off": "Notifications are off for all your devices.",
         "unavailable": "Notifications are not available."
+      },
+      "mcp": {
+        "title": "Background use with your account",
+        "description": "Agents may use these services in runs without you, with your own account. Allow it per service; you can withdraw it at any time. A changed service asks for your permission again.",
+        "allow": "Allow {{name}} in background runs",
+        "allowed-since": "Allowed since {{date}}",
+        "not-allowed": "Not allowed",
+        "used-by": "Used by:",
+        "load-failed": "The services that ask for your permission could not be loaded.",
+        "accounts-title": "Connected services",
+        "accounts-description": "Agents use these services with your own account. Connect a service to let them work with it; disconnecting revokes the access at once.",
+        "status": {
+          "not-connected": "Not connected",
+          "active": "Connected",
+          "reauthorization-required": "Connect again",
+          "issuer-changed": "Paused by the administrator"
+        },
+        "connected-since": "Connected since {{date}}",
+        "more-permissions": "The service asked for more permissions: {{scopes}}. Connect again to grant them.",
+        "issuer-changed": "The service changed how it signs in. An administrator confirms it first.",
+        "connect": "Connect",
+        "connect-again": "Connect again",
+        "disconnect": "Disconnect",
+        "confirm-disconnect": "Disconnect and revoke",
+        "cancel": "Cancel",
+        "connect-done": "{{name}} is connected.",
+        "disconnect-done": "{{name}} is disconnected and its access revoked."
       }
     },
     "admin": {
@@ -434,7 +507,6 @@
       "edit": "Edit",
       "delete": "Delete",
       "confirm-delete": "Confirm delete",
-      "keep": "Keep",
       "enabled": "Enabled",
       "disabled": "Disabled",
       "enable": "Enable",
@@ -486,9 +558,8 @@
           "configured-off": "Off in configuration",
           "configured-off-hint": "Disabled in the application's code until the next deployment; it cannot be resumed here.",
           "changed": "Changed by {{user}} on {{date}}.",
-          "reason": "Reason: {{reason}}",
+          "reason": "Note: {{reason}}",
           "waiting": "{{count}} events wait for the resume.",
-          "reason-label": "Reason (optional)",
           "action": {
             "active": "Resume",
             "paused": "Pause",
@@ -503,7 +574,9 @@
             "active": "Confirm resume",
             "paused": "Confirm pause",
             "stopped": "Confirm stop"
-          }
+          },
+          "note-label": "Note for other administrators (optional)",
+          "note-hint": "Shown on this agent with your name and the time until the next change. The agent does not read it."
         },
         "skills": {
           "title": "Skills",
@@ -523,22 +596,29 @@
           "action": {
             "shadow": "Put in shadow",
             "live": "Put live",
-            "code": "Follow the code"
+            "code": "Follow the code",
+            "own": "Back to its own setting"
           },
           "explain": {
             "shadow": "New runs work in shadow threads that only administrators see: nobody is notified and nothing proposed there executes. Running work finishes as it started; the live threads and their open proposals stay.",
             "live": "New runs work live: people see them, are notified and decide their proposals.",
-            "code": "The mode in code decides again."
+            "code": "The mode in code decides again.",
+            "own": "The agent's own setting decides again: {{mode}}."
           },
           "skill-explain": {
             "shadow": "Work that reaches the skill {{skill}} goes to the shadow threads; the other skills keep their mode.",
             "live": "The skill {{skill}} works live again, unless its agent works in shadow.",
-            "code": "The mode in code decides again for the skill {{skill}}."
+            "code": "The mode in code decides again for the skill {{skill}}.",
+            "own": "The own setting of the skill {{skill}} decides again: {{mode}}."
           },
           "confirm": {
             "shadow": "Confirm shadow",
             "live": "Confirm live",
             "code": "Confirm"
+          },
+          "mode": {
+            "shadow": "in shadow",
+            "live": "live"
           }
         },
         "service-account": {
@@ -556,9 +636,32 @@
           "confirm": {
             "set": "Confirm account",
             "code": "Confirm"
-          }
+          },
+          "input-label-search": "Account"
+        },
+        "run-config": "Run configuration",
+        "run-now": "Run now",
+        "runs": "Runs",
+        "chat": {
+          "hidden": "Not in the chat"
+        },
+        "version-label": "Version",
+        "tool-count-one": "{{count}} tool selector",
+        "server-count-one": "{{count}} MCP server",
+        "required-policy": "Requires:",
+        "works-on": {
+          "label": "Works on:",
+          "all": "All objects",
+          "application": "The whole application",
+          "and-application": "and the whole application",
+          "per-division": "per division",
+          "undeclared": "(not stated in code)",
+          "known": "Known to work on: {{types}}.",
+          "run-policy": "Run for the whole application by: {{policy}}.",
+          "view-policy": "Results for the whole application seen by: {{policy}}."
         },
-        "run-config": "Run configuration"
+        "groups": "Groups: {{groups}}",
+        "catalog-failed": "The building blocks of agent runs could not be read. Until they are, agents cannot be run now here and what an agent works on and its groups stay as they are."
       },
       "agent-editor": {
         "new-title": "New agent",
@@ -586,7 +689,46 @@
         "matches": "{{count}} catalog tools match the selectors.",
         "mcp-servers": "MCP servers",
         "mcp-servers-hint": "Enabled tools of these servers become available to this agent.",
-        "mcp-servers-empty": "No MCP servers are configured."
+        "mcp-servers-empty": "No MCP servers are configured.",
+        "use": {
+          "title": "How is this agent used?",
+          "chat": "In the chat",
+          "chat-hint": "People choose it in the assistant to ask questions and get work done.",
+          "background": "On its own",
+          "background-hint": "It starts on events or a schedule and proposes work; it is not offered in the chat.",
+          "both": "Both",
+          "both-hint": "Offered in the chat, and it also starts on events or a schedule.",
+          "next": "After saving, a short setup asks when the agent starts, what it does and on whose behalf."
+        },
+        "works-on": {
+          "title": "What does this agent work on?",
+          "hint": "Events, schedules, people and other agents start it only on what it works on.",
+          "all": "All objects",
+          "all-hint": "Every kind of object the application has, now and later.",
+          "types": "Chosen kinds of objects",
+          "types-hint": "Only the kinds of objects you tick below.",
+          "no-types": "The application has no kinds of objects to choose from.",
+          "too-many": "Choose at most 20 kinds of objects, or All objects.",
+          "known": "Known to work on: {{types}}.",
+          "application": "The whole application",
+          "application-hint": "Work that concerns no single object, such as a weekly overview.",
+          "per-division": "Per division",
+          "per-division-hint": "Its work for the whole application, such as its schedules, runs separately for every division.",
+          "missing": "Choose at least one kind of object, or the whole application.",
+          "run-policy": "Who may run it for the whole application",
+          "run-policy-default": "Administrators (default)",
+          "run-policy-hint": "People who pass this may start the agent for the whole application.",
+          "view-policy": "Who sees its results for the whole application",
+          "view-policy-default": "Everyone who may use the agent (default)",
+          "view-policy-hint": "Results on an object follow who may read that object."
+        },
+        "groups": {
+          "title": "Groups",
+          "hint": "Pages of the application show the agents of a group on a board, with their latest results. Your choice wins over the code.",
+          "in-code": "In this group in code",
+          "shadow-variant": "A shadow variant works for administrators only and joins no group."
+        },
+        "catalog-unavailable": "The building blocks of agent runs could not be read, so what this agent works on and its groups cannot be changed now. Saving keeps them as they are."
       },
       "effect": {
         "read-only": "Read only",
@@ -619,12 +761,59 @@
         "unassigned": "Not assigned to an agent",
         "secret-set": "Secret set",
         "no-secret": "No secret",
+        "secret-reference": "Secret from {{reference}}",
+        "client-certificate": "Client certificate {{name}}",
+        "transport-fallback": "HTTP+SSE fallback",
+        "connected": "Last connection {{date}}",
+        "connect-failed": "Last connection failed {{date}}",
+        "never-connected": "Not connected yet",
+        "headless": {
+          "never": "Not in background runs",
+          "organization": "Background runs with this credential",
+          "personal": "Background runs with the person's own account, after consent"
+        },
         "auth": {
           "none": "No authentication",
           "bearer": "Bearer token",
           "api-key": "API key",
-          "forward-user-token": "Forward the user's token"
-        }
+          "basic": "User name and password",
+          "forward-user-token": "Forward the user's token",
+          "oauth": "OAuth (authorization)",
+          "oauth-client-credentials": "OAuth client credentials"
+        },
+        "transport": {
+          "streamable-http": "Streamable HTTP",
+          "auto": "Streamable HTTP with fallback to HTTP+SSE (deprecated)"
+        },
+        "connection-scope": {
+          "organization": "One connection for everyone",
+          "user": "Each person connects"
+        },
+        "connection-status": {
+          "not-connected": "Not connected",
+          "active": "Connected",
+          "reauthorization-required": "Connect again",
+          "issuer-changed": "Waiting for confirmation"
+        },
+        "organization-account": "Everyone acts as {{account}}",
+        "connected-by": "Connected by {{actor}} on {{date}}",
+        "connect": "Connect",
+        "reconnect": "Connect again",
+        "disconnect": "Disconnect",
+        "confirm-disconnect": "Disconnect and revoke",
+        "connecting": "Waiting for the authorization…",
+        "connect-done": "The organization's account is connected.",
+        "disconnect-done": "The connection was removed and its tokens revoked.",
+        "personal-connections": "Personal connections: {{active}}",
+        "revoke-all": "Revoke all personal connections",
+        "confirm-revoke-all": "Revoke for everyone",
+        "revoke-all-done": "Every personal connection was revoked.",
+        "issuer-changed": "The server named another authorization server. Edit the server and confirm it.",
+        "required-scopes": "The server asked for: {{scopes}}",
+        "connect-own": "Connect my account",
+        "connect-own-done": "Your own account is connected; tests and syncs use it.",
+        "personal-attention": "{{count}} need to connect again",
+        "personal-connections-failed": "The personal connections could not be counted."
       },
       "server-editor": {
         "new-title": "New MCP server",
@@ -638,6 +827,10 @@
         "auth-mode": "Authentication",
         "header-name": "Header name",
         "header-name-hint": "Default X-Api-Key.",
+        "header-name-invalid": "Use 1 to 128 letters, digits and dashes.",
+        "user-name": "User name",
+        "user-name-hint": "Sent with the secret as basic authentication.",
+        "user-name-invalid": "Enter a user name without a colon, at most 256 characters.",
         "secret": "Secret",
         "secret-hint": "Stored encrypted and never shown again.",
         "secret-set": "A secret is set.",
@@ -647,10 +840,58 @@
         "secret-will-clear": "The secret will be cleared when you save.",
         "secret-undo": "Keep the current secret",
         "secret-new": "New secret",
+        "secret-source": "Where the secret is",
+        "secret-source-stored": "Stored here, encrypted",
+        "secret-source-reference": "A secret of the application",
+        "secret-reference": "Secret reference",
+        "secret-reference-hint": "config:<name> reads NewHeap:AI:Assistant:Mcp:Secrets:<name> from the configuration; another prefix is a source the application registered, such as a vault. The secret is read for every connection, so a rotation applies at once.",
+        "secret-reference-invalid": "Enter a reference such as config:planning-token.",
+        "client-certificate": "Client certificate",
+        "client-certificate-hint": "Optional. The name of a certificate that the application configured under NewHeap:AI:Assistant:Mcp:ClientCertificates, presented for mutual TLS.",
+        "client-certificate-invalid": "Use letters, digits, dots, underscores and dashes.",
+        "transport": "Transport",
+        "transport-hint": "Choose the fallback only for a server that does not offer Streamable HTTP yet.",
         "forward-warning": "The signed-in user's token is sent to this server. The server's host must be on the allow-list of the application.",
+        "custom-auth": {
+          "organization": "The application supplies this credential; every caller shares it. It takes no secret here.",
+          "person": "The application supplies each person's own credential. It takes no secret here."
+        },
+        "headless-use": "Background runs",
+        "headless-use-hint": "Agents that work without a person may use the tools with this server's own credential. The call still needs the rights of the person the agent works for, or, for an agent that acts for itself, a grant in the application code (mcp.<server id>.*).",
+        "headless-use-personal": "Background runs may use the server with a short-lived token of the person the run acts for, only after that person allowed it in their preferences.",
         "required-policy": "Required policy",
         "required-policy-hint": "Optional. The server's tools are only available to users who pass this policy.",
-        "enabled": "Server is enabled"
+        "enabled": "Server is enabled",
+        "connection-scope": "Who connects",
+        "connection-scope-hint": "One connection makes everyone act as the organization's account. With personal connections every person connects their own account and the server sees who acts.",
+        "oauth-warning": "With one connection for everyone, every user of the server's agents acts as the connected account, with all its rights.",
+        "discover": "Read authorization",
+        "discovering": "Reading…",
+        "discovery-title": "Authorization found",
+        "discovery-issuer": "Authorization server",
+        "discovery-resource": "Resource",
+        "discovery-scopes": "Scopes offered",
+        "discovery-registration": "Registration",
+        "registration-metadata-document": "By the host's client metadata document",
+        "registration-dynamic": "Dynamic registration",
+        "registration-manual": "A client id from the server's administrator is needed",
+        "pkce-missing": "This authorization server does not support PKCE with S256; it cannot be used.",
+        "confirm-authorization": "I confirm this authorization server for the server",
+        "confirm-authorization-hint": "Tokens are only requested from the confirmed authorization server. When the server names another one later, connections stop until you confirm again.",
+        "confirmed-authorization": "Confirmed: {{issuer}}",
+        "confirm-required": "Read the authorization and confirm it.",
+        "scopes": "Scopes",
+        "scopes-hint": "Space-separated. Only these scopes are requested; empty leaves the choice to the authorization server.",
+        "scopes-invalid": "Use scope names without quotes or backslashes, at most 1,024 characters.",
+        "client-id": "Client id",
+        "client-id-hint": "Optional for authorization: without one the host registers itself when the server allows it. Required for client credentials.",
+        "client-id-required": "Enter the client id the authorization server issued.",
+        "client-secret": "Client secret",
+        "client-secret-hint": "Stored encrypted and never shown again. Client credentials need a secret, a reference or the client certificate (private_key_jwt).",
+        "client-secret-reference": "Client secret reference",
+        "organization-account-label": "Connected account",
+        "organization-account-label-hint": "Which account the organization connects, for example \"Planning service account\". Everyone using the server sees it.",
+        "organization-account-label-required": "Name the account that will be connected."
       },
       "tools": {
         "title": "Tools of {{name}}",
@@ -802,7 +1043,6 @@
         "title": "Run configuration of {{name}}",
         "description": "Skills and triggers that the administration adds without a deploy, made of the building blocks the application registers. New skills and triggers start in shadow, where nobody is notified and nothing executes.",
         "problems": {
-          "title": "Some settings no longer fit the application and are out of effect:",
           "kind": {
             "agent": "Run settings:",
             "skill": "Skill {{id}}:",
@@ -821,18 +1061,27 @@
             "unknown-subject-set": "the set of subjects no longer exists.",
             "unknown-skill": "the skill no longer exists.",
             "invalid-schedule": "the schedule or its time zone is not valid.",
-            "invalid": "a value is not valid."
+            "invalid": "a value is not valid.",
+            "not-worked-on": "it concerns a kind of object, or the whole application, that the agent does not work on."
           }
         },
         "field-errors": {
           "required": "Required.",
           "invalid": "Not valid here.",
           "too-long": "Too long.",
-          "not-found": "The application does not know this name."
+          "not-found": "The application does not know this name.",
+          "at-least": "Enter a whole number of at least {{min}}.",
+          "between": "Enter a whole number from {{min}} to {{max}}.",
+          "budget-pair": "Fill in both daily limits, or neither.",
+          "dash-case": "Use lowercase letters, digits and dashes, starting with a letter.",
+          "taken": "This id is already in use.",
+          "name-letters": "Use at least one letter in the name.",
+          "instructions-for-model": "Without fixed rules the model works from these instructions; describe what it should do.",
+          "application-not-worked-on": "The agent does not work on the whole application. Choose a set of objects, or let the agent work on the whole application first."
         },
         "settings": {
           "title": "Run settings",
-          "empty": "This agent only chats. Give it run settings to let it work on its own, with skills and triggers.",
+          "empty": "This agent only chats. Let it work on its own: it then starts on events or a schedule, works by rules or with the model, and proposes changes that people approve.",
           "rights": "It has no rights of its own: in runs without a person it uses what the account it answers to may use, within its tools.",
           "add": "Add run settings",
           "edit": "Change run settings",
@@ -859,14 +1108,42 @@
             "deny": "Refuse"
           },
           "gateway-reads": "Read through the application's data gateway with the account's rights",
-          "delegate": "Also use what the person who starts a run may use"
+          "delegate": "Also use what the person who starts a run may use",
+          "add-title": "Run settings",
+          "edit-title": "Change the run settings",
+          "who": {
+            "title": "On whose behalf does the agent work?",
+            "short": "On behalf of",
+            "explain": "The agent has no rights of its own. In runs without a person it uses what this account may use, within its own tools."
+          },
+          "accountability-explain": {
+            "service-account": "A technical account, for example an operations account. The usual choice.",
+            "subject-responsible": "The person responsible for the project or customer the run is about.",
+            "agent": "The agent itself: it has no rights and can only propose."
+          },
+          "how": {
+            "title": "How does it work?",
+            "hint": "Fixed rules decide without a model and hand doubtful cases to the model. This applies to runs that no skill handles."
+          },
+          "approval": {
+            "title": "Who approves its proposals?",
+            "default": "The application's default",
+            "hint": "Proposals that change data wait for this approval; nothing executes before it."
+          },
+          "no-triage": "No triage",
+          "retries-hint": "How often a failed run is tried again.",
+          "max-concurrent-hint": "Runs of this agent that work at the same time.",
+          "max-per-subject-hint": "Protects a project or customer from too many runs in one day.",
+          "elevated-reads-hint": "What happens when the agent reads data that the reader of its thread may not see.",
+          "gateway-reads-hint": "Lets the agent read through the application's data gateway, such as its API, as the account.",
+          "delegate-hint": "When a person starts a run by hand, the agent may also use that person's rights."
         },
         "rule-handler": "Rules",
         "rule-handler-value": "Rules: {{name}}",
         "policy-value": "Approval: {{name}}",
         "profile-value": "Model: {{name}}",
         "approval-policy": "Approval policy",
-        "model": "The model, no rules",
+        "model": "The model decides (no fixed rules)",
         "none": "None",
         "choose": "Choose…",
         "max-tokens": "Tokens per run",
@@ -893,7 +1170,7 @@
           "instructions": "Instructions",
           "instructions-hint": "Read after the agent's own instructions while it works in the skill.",
           "tools": "Tools",
-          "tools-hint": "Narrow the agent's tools for this skill. None selected: the agent's tools.",
+          "tools-hint": "The tools the agent offers; select some to narrow them for this skill. None selected: all of the agent's tools. Add tools to the agent with Edit.",
           "profile": "Model profile",
           "agent-profile": "The agent's profile",
           "agent-policy": "The agent's policy",
@@ -902,7 +1179,20 @@
           "apply-live": "Put live at once",
           "starts-in-shadow": "A new skill starts in shadow.",
           "versions": "Versions",
-          "remove-explain": "Its versions stay as history. A trigger that starts it must go first."
+          "remove-explain": "Its versions stay as history. A trigger that starts it must go first.",
+          "what": {
+            "title": "What is the skill for?"
+          },
+          "how": {
+            "title": "How does it work?"
+          },
+          "rules-hint": "The rules decide without a model; a doubtful case goes to the model with the instructions below.",
+          "model-hint": "The model decides with the instructions below and the chosen tools.",
+          "profile-hint": "The model profile it uses; by default the agent's.",
+          "apply-shadow-hint": "The new version runs next to the live one; compare them, then promote or discard it.",
+          "apply-live-hint": "For a small correction: the new version replaces the live one at once.",
+          "tools-pattern": "All tools that match: {{count}} now.",
+          "background-hint": "Started by a trigger the agent works without a chat: what it writes is kept with its run in the thread of what it works on, and changes become proposals."
         },
         "candidate": {
           "badge": "Candidate v{{version}}",
@@ -968,8 +1258,295 @@
             "schedule": "Schedule",
             "webhook": "Webhook"
           },
-          "starts-in-shadow": "A new trigger starts in shadow."
+          "starts-in-shadow": "A new trigger starts in shadow.",
+          "id-hint": "Lowercase letters, digits and dashes, for example project-created.",
+          "when": {
+            "title": "When does it start?"
+          },
+          "then": {
+            "title": "Then"
+          },
+          "source-event-hint": "Something happens in the application, such as a project being created.",
+          "source-schedule-hint": "At fixed times, for every subject in a set.",
+          "source-schedule-application-hint": "At fixed times, for the whole application or for every object in a set.",
+          "debounce-hint": "Waits this long for more events about the same subject and handles them in one run.",
+          "subject-set-hint": "The projects or customers the schedule handles each time.",
+          "message-hint": "What the agent reads as its task each time.",
+          "examples": "Examples",
+          "example": {
+            "weekdays-8": "Weekdays at 8:00",
+            "daily-7": "Daily at 7:00",
+            "monday-9": "Mondays at 9:00",
+            "hourly": "Every hour"
+          },
+          "conflict-explain": {
+            "coalesce": "Adds the event to the waiting run.",
+            "queue": "Runs again after the busy run.",
+            "supersede": "Replaces the waiting run with this event.",
+            "ignore": "Skips this event or tick."
+          },
+          "live-badge": "Live",
+          "target": {
+            "title": "What does it run for each time?",
+            "application": "The whole application",
+            "application-hint": "One run each time, about the application as a whole.",
+            "application-per-division-hint": "One run each time for every division, each in its own thread.",
+            "set": "Every object in a set",
+            "set-hint": "One run each time for every object in a set, such as the active projects.",
+            "every-division": "Every division",
+            "dropped": "This schedule ran for the whole application, which the agent no longer works on. Choose a set of objects."
+          }
+        },
+        "way-of-working": "Way of working",
+        "check-fields": "Check the marked fields.",
+        "limits": {
+          "title": "Limits"
+        },
+        "advanced": {
+          "title": "Advanced",
+          "explain": "These options have sensible defaults; change them only when you need to."
+        },
+        "account": {
+          "search-placeholder": "Search by name or e-mail address",
+          "id-placeholder": "The account's id",
+          "search-hint": "Choose the account by name or e-mail address. It must be able to sign in.",
+          "id-hint": "The application offers no account search; enter the account's id. It must be able to sign in.",
+          "known": "Account: {{name}}",
+          "unknown": "The application does not know this account.",
+          "lookup-again": "Look up again"
+        },
+        "policy-summary": {
+          "who": "Approved by {{approvers}}.",
+          "nobody": "Nobody is named to approve.",
+          "or": "or",
+          "wait": "A proposal waits {{duration}}.",
+          "mode": {
+            "inline": "The run waits for the decision.",
+            "deferred": "The run ends; people decide later."
+          },
+          "four-eyes": "Whoever caused the proposal may not approve it.",
+          "approver": {
+            "initiator": "the person who caused it",
+            "named-role": "someone with the role {{role}} on the subject",
+            "subject-role": {
+              "reader": "a reader of the subject",
+              "participant": "a participant of the subject",
+              "approver": "an approver of the subject"
+            },
+            "policy": "someone with the right {{policy}}"
+          },
+          "duration": {
+            "minute": "1 minute",
+            "minutes": "{{count}} minutes",
+            "hour": "1 hour",
+            "hours": "{{count}} hours",
+            "day": "1 day",
+            "days": "{{count}} days"
+          }
+        },
+        "setup": {
+          "start": "Let this agent work on its own",
+          "title": "Let {{name}} work on its own",
+          "explain": "Four short questions. Everything starts in shadow: the agent works, but nobody is notified and nothing executes until you put it live.",
+          "progress": "Steps",
+          "step": {
+            "when": "When",
+            "what": "What",
+            "who": "On whose behalf",
+            "limits": "Approval and limits",
+            "review": "Review"
+          },
+          "when": {
+            "title": "When does the agent start?"
+          },
+          "what": {
+            "title": "What does it do?",
+            "name": "Name of the task",
+            "name-hint": "A short name, for example \"Start new projects\".",
+            "name-id": "Its id becomes {{id}}."
+          },
+          "limits": {
+            "title": "Who approves, and what are its limits?"
+          },
+          "review": {
+            "title": "Review",
+            "event": "When {{event}} happens",
+            "schedule": "On the schedule {{cron}} ({{zone}}), for {{set}}",
+            "schedule-application": "On the schedule {{cron}} ({{zone}}), for the whole application",
+            "schedule-divisions": "On the schedule {{cron}} ({{zone}}), for the whole application in every division",
+            "shadow": "The task and its trigger start in shadow. Put them live now, or later from the run configuration."
+          },
+          "no-events": "The application registers no events yet; choose a schedule.",
+          "next": "Next",
+          "back": "Back",
+          "save-shadow": "Save in shadow",
+          "save-live": "Save and put live",
+          "done": "Saved.",
+          "saved-shadow": "The agent works in shadow now: it runs, but nobody is notified and nothing executes. Put the task and its trigger live when the results are right.",
+          "saved-live": "The agent works live now."
+        },
+        "note-hint": "Kept with this version in its history, with your name and the time. The agent does not read it.",
+        "flow": {
+          "title": "At a glance",
+          "description": "How the agent works, from what it works on to its results. Each step opens the form that changes it.",
+          "problems": "Some settings no longer fit the application and are out of effect. Each shows at its step below, with what fixes it.",
+          "attention-one": "1 to fix",
+          "attention": "{{count}} to fix",
+          "warnings": "To fix",
+          "steps": {
+            "works-on": "What it works on",
+            "when": "When it runs",
+            "skills": "How it works",
+            "account": "Who it answers to",
+            "approval": "Who approves its proposals",
+            "results": "Its results"
+          },
+          "works-on": {
+            "undeclared": "Its code does not say, so it works on all objects and not on the whole application.",
+            "in-code": "Set in the application's code."
+          },
+          "target": {
+            "application": "For the whole application",
+            "every-division": "For every division",
+            "type": "For the object it names: {{value}}",
+            "set": "For every object in {{value}}",
+            "code-set": "For every object of a set in code",
+            "when-fired": "For the object the event names"
+          },
+          "when": {
+            "none": "No trigger starts it: it runs only when someone runs it now.",
+            "scope": {
+              "objects": "Run now: for one of the objects it works on.",
+              "application": "Run now: for the whole application.",
+              "application-and-objects": "Run now: for the whole application or one of the objects it works on.",
+              "division": "Run now: for one division at a time.",
+              "division-and-objects": "Run now: for one division at a time or one of the objects it works on."
+            },
+            "run-policy": "For the whole application only by: {{policy}}.",
+            "run-policy-default": "the assistant's administrators",
+            "paused": "It is paused: a run started now waits until it is resumed.",
+            "run-now-unavailable": {
+              "stopped": "Run now: not while the agent is stopped.",
+              "configured-off": "Run now: not while the application's code switches the agent off.",
+              "no-settings": "Run now: only once the agent has run settings.",
+              "no-catalog": "Run now: not until the run catalog can be read."
+            }
+          },
+          "skills": {
+            "code-rules": "Fixed rules in the application's code",
+            "none": "No skills: every run works by its way of working and instructions.",
+            "tools": "Its tools",
+            "no-tools": "No tools: it can only answer.",
+            "more-tools": "And {{count}} more.",
+            "places-at": "A run's proposal waits at the object it names ({{type}}), where that object's approvers decide.",
+            "places-in-run": "A run's proposal waits in the run's own thread.",
+            "servers": "Its MCP servers",
+            "tool-not-offered": "{{selector}} is no longer offered: no tool of the application matches it."
+          },
+          "effect": {
+            "read-only": "Reads",
+            "idempotent-mutation": "Changes",
+            "mutation": "Changes",
+            "destructive": "Removes"
+          },
+          "servers": {
+            "headless": {
+              "never": "Not in runs on their own",
+              "organization": "The organization's account",
+              "personal": "Personal accounts"
+            },
+            "use": {
+              "unknown": "Whether it is used in runs that start on their own is not known here.",
+              "missing": "This server no longer exists.",
+              "disabled": "The server is switched off.",
+              "never": "Its tools are left out of runs that start on their own, such as trigger runs.",
+              "organization": "Its tools are used in runs that start on their own, with the organization's credential.",
+              "organization-grant": "Its tools are used in runs that start on their own with the organization's credential once the agent's code grants them, because the agent answers to itself.",
+              "personal": "Its tools are used in runs that start on their own only with the consent of the person a run acts for.",
+              "personal-responsible": "Its tools are used with the account of the person responsible for the object, once that person allows background use.",
+              "personal-initiator": "Its tools are used only in runs a person started, with that person's account and consent.",
+              "personal-never-account": "Its tools are not used: a technical account has no personal connection.",
+              "personal-never-agent": "Its tools are not used: an agent that answers to itself has no personal connection."
+            },
+            "warning": {
+              "missing": "MCP server {{server}} no longer exists.",
+              "disabled": "MCP server {{server}} is switched off.",
+              "never": "MCP server {{server}} is not used in runs that start on their own: its background use is off.",
+              "personal-never-account": "MCP server {{server}} is not used: it works with personal accounts and the agent answers to a technical account.",
+              "personal-never-agent": "MCP server {{server}} is not used: it works with personal accounts and the agent answers to itself."
+            }
+          },
+          "account": {
+            "no-settings": "It has no run settings yet, so it cannot run on its own.",
+            "rights": {
+              "agent": "It has no rights of its own and can only propose.",
+              "subject-responsible": "Runs use what the person responsible for the object may use, within its tools.",
+              "service-account": "Runs use what this account may use, within its tools."
+            },
+            "delegates": "It also uses what the person who starts a run may use.",
+            "overridden": "An administrator replaced the account in code.",
+            "in-code": "Set in the application's code."
+          },
+          "approval": {
+            "autonomy": "What it may do:",
+            "skill": "Skill {{skill}}:",
+            "no-settings": "Chosen with the run settings.",
+            "in-code": "Set in the application's code."
+          },
+          "results": {
+            "groups": "Groups:",
+            "no-groups": "In no group, so no board shows it.",
+            "view-policy": "Its results for the whole application are seen by: {{policy}}.",
+            "view-policy-default": "everyone who may use the agent",
+            "shadow": "It works in shadow: its runs go to shadow threads that only administrators see.",
+            "latest": "Latest runs",
+            "more-runs": "And {{count}} earlier runs in its runs."
+          },
+          "entry": {
+            "works-on": "Change what it works on",
+            "tools": "Change its tools and MCP servers",
+            "settings": "Change the run settings",
+            "approval": "Change the approval",
+            "runs": "All runs",
+            "groups": "Change its groups",
+            "mcp-servers": "Open the MCP servers",
+            "edit-trigger": "Change the trigger",
+            "edit-skill": "Change the skill",
+            "edit-trigger-named": "Edit trigger {{trigger}}",
+            "edit-skill-named": "Edit skill {{skill}}"
+          }
         }
+      },
+      "runs": {
+        "title": "Runs",
+        "description": "Every run of this agent, newest first, with what it worked on, its result, proposals, usage and duration. Shadow runs are marked.",
+        "back": "Back to agents",
+        "back-to-run-config": "Back to the run configuration",
+        "back-to-runs": "Back to the runs",
+        "filters": "Filter the runs",
+        "subject-type": "Works on",
+        "any-subject": "Everything",
+        "whole-application": "The whole application",
+        "subject-id": "Object",
+        "subject-id-hint": "The object's id, as a run shows it; leave it empty for every object of this kind.",
+        "status": "Status",
+        "any-status": "Every status",
+        "from": "From",
+        "to": "Until (inclusive)",
+        "period-invalid": "The end of the period comes before its start.",
+        "apply": "Show runs",
+        "clear": "Clear filters",
+        "empty": "No runs match.",
+        "count": "{{shown}} of {{total}} runs",
+        "more": "Show more runs",
+        "only-object": "Runs on this object",
+        "only-application": "Runs for the whole application"
+      },
+      "account-names-failed": "The names of accounts could not be read; their account IDs are shown instead.",
+      "account": {
+        "id": "Account ID {{id}}",
+        "copy-id": "Copy the account ID of {{name}}",
+        "id-copied": "Account ID copied"
       }
     },
     "page-context": {
@@ -1051,9 +1628,14 @@
           "superseded": "The current run stops and the agent starts again.",
           "ignored": "The agent is busy; nothing was started.",
           "deduplicated": "This was already started.",
-          "rejected": "The agent could not be started."
+          "waiting": "The agent is paused. It starts when it is resumed.",
+          "deferred": "The start is recorded and goes ahead as soon as the change it belongs to is saved."
         },
-        "shadow": "Shadow thread: only administrators see it, and nothing proposed here executes."
+        "shadow": "Shadow thread: only administrators see it, and nothing proposed here executes.",
+        "waiting": {
+          "assistant-agent-paused": "The agent is paused. This run starts when an administrator resumes it.",
+          "assistant-skill-paused": "The agent's skill for this is paused. This run starts when an administrator resumes it."
+        }
       },
       "subject": {
         "title": "Agent suggestions",
@@ -1117,7 +1699,15 @@
         "dismiss": "Dismiss",
         "dismiss-label": "Dismiss the closed proposal: {{summary}}",
         "show-successor": "Show the newer proposal",
-        "stale-by": "Overtaken by {{actor}}"
+        "stale-by": "Overtaken by {{actor}}",
+        "placed-by": {
+          "application": "Proposed by a run for the whole application",
+          "division": "Proposed by a run for the whole application in {{name}}",
+          "object": "Proposed by a run for another object",
+          "object-named": "Proposed by a run for another object: {{type}}",
+          "open": "Open the run's conversation",
+          "open-label": "Open the conversation of the run that proposed this"
+        }
       },
       "run": {
         "empty": "No runs yet.",
@@ -1148,6 +1738,7 @@
         "tool-calls": "{{count}} tool calls",
         "tokens": "{{count}} tokens",
         "proposals": "{{count}} proposals",
+        "mcp-skipped": "{{count}} connected services left out",
         "attempt": "Attempt {{attempt}}",
         "cancel": "Cancel",
         "resume": "Resume",
@@ -1179,7 +1770,129 @@
           "completed": "Answered",
           "failed": "Not answered"
         }
+      },
+      "object-agents": {
+        "title": "Agents",
+        "description": "The agents that work on this, their latest result and what they propose.",
+        "loading": "Loading the agents…",
+        "empty": "No agent works on this that you may use.",
+        "latest": "Latest run",
+        "never": "Not run here yet.",
+        "no-result": "No result yet.",
+        "result-label": "Result",
+        "shadow": "In shadow",
+        "proposals": "{{count}} open proposals",
+        "proposals-one": "1 open proposal",
+        "proposals-none": "No open proposals",
+        "run-now": "Run now",
+        "show-work": "Show the work",
+        "hide-work": "Hide the work",
+        "failure": "Why: {{reason}}"
+      },
+      "result": {
+        "loading": "Loading the run…",
+        "not-found": "This run does not exist or you may not see it.",
+        "show": "Show the result",
+        "hide": "Hide the result",
+        "started": "Started",
+        "duration": "Duration",
+        "duration-seconds": "{{count}} s",
+        "duration-minutes": "{{count}} min",
+        "usage": "Usage",
+        "failure": "Why it stopped",
+        "answer": "Result",
+        "truncated": "The answer was longer; this is its beginning.",
+        "no-answer": "This run kept no answer.",
+        "proposals": "Proposals",
+        "no-proposals": "This run proposed nothing.",
+        "hidden-proposals": "{{count}} more proposals wait at objects you may not see.",
+        "files": "Files",
+        "mcp-skipped": "Connected services left out"
+      },
+      "board": {
+        "title": "Agents",
+        "loading": "Loading the board…",
+        "not-found": "This board does not exist, or you may not see any of its agents.",
+        "last-visit": "You last looked here on {{date}}. What came since is marked new.",
+        "first-visit": "Everything here is new for you.",
+        "new": "New",
+        "new-label": "New since your last visit",
+        "works-on": "Works on {{list}}",
+        "works-on-all": "all kinds of objects",
+        "works-on-application": "the whole application",
+        "works-on-application-per-division": "the whole application, per division",
+        "per-division": "Works per division: its results show on the board of a division.",
+        "objects-only": "Works on objects only: its results show with each object.",
+        "latest": "Latest result",
+        "never": "Not run for the whole application yet.",
+        "run-now": "Run now",
+        "show-proposals": "Show the proposals",
+        "hide-proposals": "Hide the proposals",
+        "show-history": "Show the history",
+        "hide-history": "Hide the history",
+        "history-title": "Runs for the whole application",
+        "history-loading": "Loading the runs…",
+        "history-empty": "No runs yet.",
+        "history-more": "Show more runs",
+        "history-limited": "Older runs are not shown here."
       }
+    },
+    "subject-picker": {
+      "search-placeholder": "Search by name",
+      "id-placeholder": "Id",
+      "id-hint": "This kind of object is chosen by its id.",
+      "looking-up": "Looking up…",
+      "found": "Found: {{name}}",
+      "not-found": "No object with this id was found, or you may not see it.",
+      "whole-application-hint": "The agent runs once, for the application as a whole.",
+      "division-placeholder": "Search a division by name",
+      "look-up-again": "Look up again"
+    },
+    "run-now": {
+      "title": "Run {{agent}} now",
+      "close": "Close",
+      "whole-application": "The whole application",
+      "target": "What should the agent work on this time?",
+      "per-division": "In one division",
+      "application": "The whole application",
+      "division": "Division",
+      "object": "{{type}}",
+      "subject-required": "Choose what the agent works on.",
+      "no-target": "This agent works on nothing it can be run on here.",
+      "no-divisions": "The application lists no divisions, so this agent cannot be run now.",
+      "on": "Runs on",
+      "message": "Instruction for the agent (optional)",
+      "message-hint": "The agent reads it at the start of this run.",
+      "cancel": "Cancel",
+      "submit": "Run now",
+      "starting": "Starting…",
+      "receipt-subject": "On",
+      "open-conversation": "Open the conversation",
+      "done": "Done",
+      "errors": {
+        "assistant-agent-forbidden": "You may not run this agent here.",
+        "assistant-subject-access-denied": "Your role on this does not allow running the agent.",
+        "assistant-agent-does-not-work-on": "The agent does not work on this. Choose something it works on."
+      }
+    },
+    "picker": {
+      "toggle": "Show the choices",
+      "searching": "Searching…",
+      "type-more": "Type at least two characters.",
+      "no-results": "Nothing found.",
+      "search-failed": "The search failed.",
+      "search-again": "Search again"
+    },
+    "connection": {
+      "title": "Connect {{name}}",
+      "not-connected": "The assistant could not use {{name}}, because your account is not connected. Connect it to let the assistant work with it on your behalf.",
+      "reauthorization-required": "Your connection to {{name}} has ended. Connect again to let the assistant use it.",
+      "insufficient-scope": "{{name}} needs more permissions than your connection grants. Connect again to grant them.",
+      "connect": "Connect",
+      "connect-again": "Connect again",
+      "connecting": "Waiting for the authorization…",
+      "connected": "{{name}} is connected.",
+      "retry": "Ask again"
     }
   }
 }