wizards 0.5.0 → 0.5.1

package/apps/runtime/dist/docs/user/wordpress.md

@@ -1,113 +1,121 @@
 ---
 title: WordPress
-description: Put wizards on a WordPress site with the plugin "engenty wizards" — connect, read the site in, place a wizard, read results in the admin.
-version: 0.3.4
+description: Put wizards on a WordPress site with the plugin “engenty wizards” – connect, read the site in, place a wizard, read results in the admin.
+version: 0.5.0
 ---
 
 The plugin **engenty wizards** puts the wizards of an engenty.ai account on a WordPress site and
 shows what visitors left in the WordPress admin. The wizards run on engenty.ai: WordPress keeps
-its settings and the connection, no answers. On WordPress 7.0 a wizard can also run on the site
-itself, with the site's own AI provider and no account ([below](#without-an-account)).
+the plugin’s settings and the connection, but no answers. On WordPress 7.0 a wizard can also run
+on the site itself, with the site’s own AI provider and no account ([below](#without-an-account)).
 
 | | |
 |---|---|
 | WordPress | 6.6 or newer; 7.0 or newer for wizards without an account |
 | PHP | 8.1 or newer, nothing else on the host |
-| Site address | https, to sign in to engenty.ai from the admin |
+| Site address | https, so you can sign in to engenty.ai from the admin |
 | Account | Free or above on engenty.ai; Contacts and Appointments need Pro |
 
 ## Install
 
-Download `engenty-wizards.zip` (in the studio under Settings → Integrate → WordPress, or from the
-[releases](https://github.com/engenty/engenty-wizards-wp-plugin/releases/latest)) and upload it in
-WordPress under **Plugins → Add New → Upload Plugin**. After activating it the menu **engenty**
+Download `engenty-wizards.zip`, either in the studio under Settings → Integrate → WordPress
+(“Download engenty-wizards.zip”) or from the
+[releases](https://github.com/engenty/engenty-wizards-wp-plugin/releases/latest). Upload it in
+WordPress under **Plugins → Add New → Upload Plugin** and activate it. The menu **engenty** then
 opens.
 
 ## Connect
 
-On **engenty → Overview**:
+On **engenty → Overview** you have two ways in:
 
 - **Create your own AI** offers a free account on engenty.ai: **Create a free account**.
-- **Sign in**, under "Already have an engenty account?", uses an account you have.
+- **Sign in**, under “Already have an engenty account?”, uses an account you already have.
 
-engenty.ai asks you to allow the site access and sends you back; your WordPress e-mail goes along
-as a suggestion. The site is then connected as you: **Settings → Connection** shows the account,
-team and plan, and **Disconnect** ends the connection and revokes the access.
+engenty.ai asks you to allow the site access and sends you back. Your WordPress email address
+goes along as a suggestion. The site is then connected as you: **Settings → Connection** shows
+the account, team and plan, and **Disconnect** ends the connection and revokes the access.
 
-**By hand:** for your own engenty server, or where signing in through the browser does not work,
-enter an **Address** and an **API key** under **Settings → Connect by hand**. On engenty.ai the key
-is made under Account; on your own server under Settings → Integrate, with an app's "Connect
-with the address and an API key" (see [AI apps](./ai-apps.md#an-app-on-another-computer)).
+**By hand:** for your own engenty server, or where signing in through the browser doesn’t work,
+enter an **Address** and an **API key** under **Settings → Connect by hand**. On engenty.ai you
+create the key under Account. On your own server you create it under Settings → Integrate, with
+an app’s “Connect with the address and an API key” (see
+[AI apps](./ai-apps.md#an-app-on-another-computer)).
+
+The plugin connects to an account on engenty.ai, not to engenty wizards on your computer. If you
+build on your computer, sign in to your account there and publish your wizards. You then choose
+them in WordPress.
 
 ## Set up
 
-After connecting, the overview walks through three steps.
+After you connect, the overview walks you through three steps.
 
 | Step | What happens |
 |---|---|
-| Read the website | The plugin reads the site from inside WordPress: name, tagline, logo, the theme's colours, e-mail and phone from the imprint and contact pages, the shop's address with WooCommerce, and the published pages as text. You untick what should not go; the rest fills the space's details where they are empty and goes into its [Knowledge](./space.md#knowledge) as pages. The space assistant then reads the imprint and contact pages for the address, VAT ID, opening hours and who runs the business |
+| Read the website | The plugin reads the site from inside WordPress: name, tagline, logo, the theme’s colours, email and phone from the imprint and contact pages, the shop’s address with WooCommerce, and the published pages as text. You untick what shouldn’t go. The rest fills in the space’s details where they are empty and goes into its [knowledge](./space.md#knowledge) as pages. engenty then reads the imprint and contact pages for the address, VAT ID, opening hours and who runs the business |
 | Create the first wizard | A template becomes a wizard and goes live in one click |
-| Put on the website | As a bubble on every page, on a new page (a draft with the wizard's block, for you to publish), or placed yourself (below) |
+| Put on the website | As a bubble on every page, on a new page (a draft with the wizard’s block, for you to publish), or placed by you (see below) |
 
-Reading the site and making wizards here needs Pro. On Free you build in the
-[app on your computer](./install.md) and publish to your account; the wizards then show in
-WordPress.
+Reading the site and making wizards in WordPress needs Pro. On Free you build in
+[engenty wizards on your computer](./install.md) and publish to your account. The wizards then
+show up in WordPress.
 
 ## Put a wizard on a page
 
 | Way | |
 |---|---|
-| Block **engenty Wizard** | Pick the wizard and how it shows: **In the text**, **Button + window** or **Bubble bottom right**, with a label, a line beside the bubble and a colour. In the text, the editor shows a wizard from the account itself |
-| Shortcode | `[engenty_wizard id="ID" mode="modal" label="Start a request"]` — `id` is the wizard's ID or the token of its link; `mode` is `inline`, `modal` or `bubble`; `text` and `color` as in the block |
-| Elementor | The widget **engenty Wizard** with the block's choices |
+| Block **engenty Wizard** | Choose the wizard and how it shows: **In the text**, **Button + window** or **Bubble bottom right**, with a label, a line beside the bubble and a colour. With “In the text”, the editor shows a wizard from the account itself |
+| Shortcode | `[engenty_wizard id="ID" mode="modal" label="Start a request"]`. `id` is the wizard’s ID or the token of its link; `mode` is `inline`, `modal` or `bubble`; `text` and `color` work as in the block |
+| Elementor | The widget **engenty Wizard**, with the block’s choices |
 | PHP | `<?php engenty_wizard( 'ID', [ 'mode' => 'inline' ] ); ?>` in a theme template |
-| Bubble | **Settings → Bubble on every page**: one wizard at the bottom right of every page but the ones you leave out, with an optional line beside it and your colour |
+| Bubble | **Settings → Bubble on every page**: one wizard at the bottom right of every page except the ones you leave out, with an optional line beside it and your colour |
 
-A wizard's drawer under **Wizards** has the shortcode and the PHP line ready to copy. For a wizard
-from the account, each way writes the share dialog's
-[website tag](./test-and-share.md#embed-in-a-website) with the page's address: a result says
+A wizard’s drawer under **Wizards** has the shortcode and the PHP line ready to copy. For a wizard
+from the account, each way writes the share dialog’s
+[website code](./test-and-share.md#embed-in-a-website) with the page’s address, so a result says
 which page it was started on.
 
 ## Results, contacts, appointments
 
 | Page | Shows | Plan |
 |---|---|---|
-| Results | What visitors left: when, which wizard, the e-mail and first answers, the page; a result opens with all answers, what the wizard made and its downloads | every plan |
+| Results | What visitors left: when, which wizard, the email address and first answers, the page. A result opens with all answers, what the wizard made and its downloads | every plan |
 | Contacts | The leads your wizards collected, with search and the wizard they came through | Pro, Team |
-| Appointments | Upcoming, past and cancelled bookings of the space's calendar | Pro, Team |
+| Appointments | Upcoming, past and cancelled bookings in the space’s calendar | Pro, Team |
 
-Who sees these pages is set under **Settings → Access to results, contacts and appointments**
-(administrators always, editors from the start). engenty.ai keeps a visitor's result 7 days.
+You set who sees these pages under **Settings → Access to results, contacts and appointments**.
+Administrators always see them, and editors do from the start. engenty.ai keeps a visitor’s
+result for 7 days.
 
 ## Without an account
 
 A WordPress 7.0 site with its own AI provider (WordPress → **Settings → Connectors**: OpenAI,
-Anthropic, Google, or Ollama through its provider plugin) runs wizards by itself: no account, no
-credits, the provider bills the site's key. On **engenty → Overview**, **Create your own AI**
-offers the account first and, below it, **Local, with your own AI provider**. **Set up locally**
-then goes through three steps: the provider (with a test), the wizards, the website.
+Anthropic, Google, or Ollama through its provider plugin) runs wizards by itself. It needs no
+account and no credits: the provider bills the site’s key. On **engenty → Overview**, **Create
+your own AI** offers the account first and, below it, **Local, with your own AI provider**.
+**Set up locally** then takes you through three steps: the provider (with a test), the wizards
+and the website.
 
 | | |
 |---|---|
-| Wizards | The templates that ship with the plugin, picked from the gallery; or a package (`.wizard`) from a wizard's share dialog in the studio (Website → "Without an account: as a package"), taken in with **Import** on the **Wizards** page |
-| What runs | Pages and their fields; photos go to the provider where it takes images. Thinking steps, which read a web page or call a public API where the step names `web_fetch` or `http` (the site does that itself). Decisions, branches, reviews and surfaces. Documents and dashboards as HTML. Results as Markdown, text, CSV or JSON, HTML as a page to print, and a PDF of a written text made in the visitor's browser; a document's PDF is the browser's print |
-| What does not | Voice notes, sign-ins to connected accounts, picking an appointment time, list fields, a file a later step reads; web search, the browser, code and image tools, MCP servers and plugin steps (Contacts, Appointments and the like); widgets, films, images, video and voice made by a model; lists and the wizard's memory; Word, Excel and other downloads |
-| The check | The share dialog's package view and, in the plugin, the gallery, the **Wizards** page and the import say per wizard whether it runs there as is, with less, or only with an account, and list what it lacks in the gallery's words ("not set up", "works without"). With less: a choice on a page that leads to something the site lacks is closed there ("Not available here right now"), a format falls away. The import refuses only a wizard that needs an account; one that needs a plugin only behind a choice runs with less, that choice closed |
-| Knowledge | The package view's **Take the knowledge along** puts the space's pages into the package as files (up to 2 MB, a page up to 60 000 characters): a snapshot of the day it was packed. On the site a thinking step gets the wizard's own text files first, then the pages that match the step best (its instructions and the answers so far), up to 60 000 characters in all |
-| From the account | On a connected site with a provider, a published wizard's drawer offers **Run here**: its published version comes over and runs on the site with the site's provider, without credits, and its results stay in WordPress. **Run through engenty.ai** switches back, **Reload** fetches the published version again |
-| Results | Kept in WordPress under **Results**, 90 days unless **Keep results** says otherwise; nothing goes to engenty.ai |
-| Limits | 6 runs an hour per visitor and 50 a day per wizard, a honeypot; 60 seconds per thinking step, up to 600 for a slow local model (the setting reaches the Ollama provider plugin's own limit too) |
+| Wizards | The templates that come with the plugin, chosen from the gallery, or a wizard file (`.wizard`) from a wizard’s share dialog in the studio (“Website” → “Without an account: as a package”). You take it in with **Import** on the **Wizards** page |
+| What runs | Pages and their fields; photos go to the provider where it takes images. AI steps, which can also read a web page or call a public API where the step names `web_fetch` or `http` (the site does that itself). Decisions, branches, reviews and views. Documents and dashboards as HTML. Results as Markdown, text, CSV or JSON, HTML as a page to print, and a PDF of a written text, made in the visitor’s browser. A document’s PDF comes from the browser’s print |
+| What doesn’t | Voice notes, sign-ins to connected accounts, choosing an appointment time, list fields, and a file a later step reads. Web search, the browser, code and image tools, connected systems (MCP servers) and plugin steps (Contacts, Appointments and the like). Widgets, films, and images, video and voice made by a model. Lists and the wizard’s memory. Word, Excel and other downloads |
+| The check | The share dialog’s package view and, in the plugin, the gallery, the **Wizards** page and the import say for each wizard whether it “Runs there as is”, “Runs with less” or “Needs an account”. They list what it lacks in the gallery’s words (“not set up”, “works without”). With less, a choice on a page that leads to something the site lacks is closed there (“Not available here right now”), and a format falls away. The import refuses only a wizard that needs an account. A wizard that needs a plugin only behind a choice runs with less, with that choice closed |
+| Knowledge | In the package view, **Take the knowledge along** puts the space’s pages into the package as files (up to 2 MB, each page up to 60,000 characters). It is a snapshot of the day it was packed. On the site, an AI step first gets the wizard’s own text files, then the pages that match the step best (its instructions and the answers so far), up to 60,000 characters in all |
+| From the account | On a connected site with a provider, a published wizard’s drawer offers **Run here**. Its published version comes over and runs on the site with the site’s provider, without credits, and its results stay in WordPress. **Run through engenty.ai** switches back, and **Reload** fetches the published version again |
+| Results | Kept in WordPress under **Results**, for 90 days unless **Keep results** says otherwise. Nothing goes to engenty.ai |
+| Limits | 6 runs an hour per visitor and 50 a day per wizard, plus a honeypot. 60 seconds per AI step, up to 600 for a slow local model (the setting also raises the Ollama provider plugin’s own limit) |
 
 The settings for all of this are under **Settings → Standalone wizards**: the limits, how long
-results are kept, photos to the provider, and the switch that lets wizards read web pages and call
-public APIs. The browser follows the wizard's flow and draws every page; WordPress keeps the
-wizard's prompts and the run and asks the provider for each thinking step through its AI Client.
-Both kinds can be on one site: under **Wizards** the ones that run on the site are marked
-**Local**.
+results are kept, whether photos go to the provider, and the switch that lets wizards read web
+pages and call public APIs. The visitor’s browser follows the wizard’s flow and draws every page.
+WordPress keeps the wizard’s prompts and the run, and asks the provider for each AI step through
+its AI Client. Both kinds can be on one site: under **Wizards**, the ones that run on the site
+are marked **Local**.
 
 ## Privacy
 
 Visitors talk to engenty.ai directly from the frame the wizard runs in. Name engenty in your
-privacy statement; **Settings → Privacy** has a sentence to start from. Wizards that run on the
-site send the visitors' answers to the site's AI provider instead: the settings give a sentence
-that names it.
+privacy statement: **Settings → Privacy** has a sentence to start from. Wizards that run on the
+site send the visitors’ answers to the site’s AI provider instead. For those, the settings give
+a sentence that names the provider.

package/apps/runtime/dist/documents/parse.js

@@ -170,7 +170,7 @@ async function read(input, opts) {
     const vision = new VisionProvider(opts.charge, opts.signal, opts.call);
     if (mime.startsWith("image/")) {
         if (!vision.canConvert(mime)) {
-            throw new UnreadableDocument(bilingual(`Bilder vom Typ ${mime} kann ich nicht lesen (PNG, JPEG, WebP gehen).`, `I cannot read images of type ${mime} (PNG, JPEG and WebP work).`));
+            throw new UnreadableDocument(bilingual(`Bilder vom Typ ${mime} lassen sich nicht lesen (PNG, JPEG und WebP gehen).`, `Images of type ${mime} can’t be read (PNG, JPEG and WebP work).`));
         }
         const result = await vision.convert(data, name, mime);
         return { markdown: result.markdown, pages: 1, via: "vision" };
@@ -214,7 +214,7 @@ async function read(input, opts) {
     if (mime === "application/json" || mime.startsWith("text/")) {
         return { markdown: text(), pages: null, via: "text" };
     }
-    throw new UnreadableDocument(bilingual(`„${name}“ (${mime}) kann ich nicht lesen.`, `I cannot read “${name}” (${mime}).`));
+    throw new UnreadableDocument(bilingual(`„${name}“ (${mime}) lässt sich nicht lesen.`, `“${name}” (${mime}) can’t be read.`));
 }
 // --- structured extraction -----------------------------------------------------
 /** The scanner's schemas say nothing about the currency; SaaS invoices come in several. */

package/apps/runtime/dist/engenty/shims/web-ingest.js

@@ -1,3 +1,19 @@
 /** Stand-in for `@engenty/web-ingest`: its host guard, and this product's HTML to Markdown. */
+import { isPublicAddress } from "../../tools/net-guard.js";
+import { assertPublicHttpHost as assertHost, isBlockedIp as blockedIp, } from "../web-ingest/ssrf.js";
 export { htmlToMarkdown } from "../../render/convert.js";
-export { assertPublicHttpHost, isBlockedIp } from "../web-ingest/ssrf.js";
+/**
+ * The copied guard misses IPv6 forms of private IPv4 addresses (NAT64, 6to4, ::a.b.c.d) and some
+ * special ranges; every address it lets through is checked again with the runtime's own range check.
+ */
+export function isBlockedIp(ip) {
+    return blockedIp(ip) || !isPublicAddress(ip);
+}
+export async function assertPublicHttpHost(urlString, lookupImpl) {
+    const result = await assertHost(urlString, lookupImpl);
+    const bad = result.addresses.find((a) => !isPublicAddress(a));
+    if (bad) {
+        throw new Error(`URL host is not allowed for fetch: ${result.url.hostname} (${bad})`);
+    }
+    return result;
+}

package/apps/runtime/dist/engine/input.js

@@ -149,14 +149,14 @@ export function readPageInput(step, input, context = {}) {
             if (field.min && v.length < field.min) {
                 errors.push({
                     field: field.id,
-                    message: bilingual(`Bitte mindestens ${field.min} auswählen`, `Please choose at least ${field.min}`),
+                    message: bilingual(`Wähl mindestens ${field.min} aus`, `Choose at least ${field.min}`),
                 });
                 continue;
             }
             if (field.max && v.length > field.max) {
                 errors.push({
                     field: field.id,
-                    message: bilingual(`Höchstens ${field.max} – bitte einige entfernen`, `At most ${field.max} – please remove some`),
+                    message: bilingual(`Höchstens ${field.max} – entferne einige`, `At most ${field.max} – remove some`),
                 });
                 continue;
             }
@@ -164,7 +164,7 @@ export function readPageInput(step, input, context = {}) {
         if (field.kind === "number" && Number.isNaN(v)) {
             errors.push({
                 field: field.id,
-                message: bilingual("Bitte eine Zahl eingeben", "Please enter a number"),
+                message: bilingual("Gib eine Zahl ein", "Enter a number"),
             });
             continue;
         }
@@ -175,7 +175,7 @@ export function readPageInput(step, input, context = {}) {
         if (field.kind === "slot" && !empty(v) && !field.options?.includes(String(v))) {
             errors.push({
                 field: field.id,
-                message: bilingual("Dieser Termin wird nicht angeboten", "This time is not offered"),
+                message: bilingual("Dieser Termin wird nicht angeboten", "This time isn’t offered"),
             });
             continue;
         }

package/apps/runtime/dist/engine/push.js

@@ -6,12 +6,12 @@ const TEXT = {
     en: {
         done: "Your result is ready.",
         failed: "The run stopped with an error.",
-        waiting: "The wizard waits for you.",
+        waiting: "The wizard is waiting for you.",
         asks: "The wizard has a question for you.",
     },
     de: {
         done: "Dein Ergebnis ist bereit.",
-        failed: "Der Durchlauf ist mit einem Fehler stehen geblieben.",
+        failed: "Der Lauf ist mit einem Fehler stehen geblieben.",
         waiting: "Der Wizard wartet auf dich.",
         asks: "Der Wizard hat eine Frage an dich.",
     },

package/apps/runtime/dist/engine/runner.js

@@ -43,7 +43,7 @@ export class RunInputError extends NotedError {
 }
 export class NoCreditsError extends NotedError {
     constructor() {
-        super(bilingual("Dieser Wizard hat gerade kein Guthaben mehr. Bitte später erneut versuchen.", "This wizard has no credits left right now. Please try again later."));
+        super(bilingual("Dieser Wizard hat gerade kein Guthaben mehr. Versuch es später noch einmal.", "This wizard has run out of credits for now. Try again later."));
     }
 }
 /** The runs this process drives right now, with the handle that stops each. */
@@ -113,19 +113,19 @@ function friendly(err) {
     }
     // A runtime that runs alone pays its provider itself: its admin can top the account up.
     if (!managed && /minimum balance|insufficient_funds|top up your credits/i.test(msg)) {
-        return bilingual("Das Guthaben beim Modell-Anbieter reicht dafür nicht aus (Videos brauchen dort ein Mindestguthaben). Bitte dort aufladen und noch einmal versuchen.", "The credit with the model provider is not enough for this (videos need a minimum balance there). Please top up there and try again.");
+        return bilingual("Das Guthaben beim Modellanbieter reicht dafür nicht aus (Videos brauchen dort ein Mindestguthaben). Lade dort auf und versuch es noch einmal.", "Your credit with the model provider isn’t enough for this (videos need a minimum balance there). Top up there and try again.");
     }
     if (/rate.?limit|429/i.test(msg)) {
-        return bilingual("Der KI-Dienst ist gerade ausgelastet. Bitte gleich noch einmal versuchen.", "The AI service is busy right now. Please try again in a moment.");
+        return bilingual("Der KI-Dienst ist gerade ausgelastet. Versuch es gleich noch einmal.", "The AI service is busy right now. Try again in a moment.");
     }
     if (/timeout|timed out/i.test(msg)) {
-        return bilingual("Der Schritt hat zu lange gedauert. Bitte noch einmal versuchen.", "The step took too long. Please try again.");
+        return bilingual("Der Schritt hat zu lange gedauert. Versuch es noch einmal.", "The step took too long. Try again.");
     }
     // The platform's own provider account (budget, quota, key): nothing the person can fix.
     if (/budget|quota|insufficient|billing|credit balance|api key|unauthori[sz]ed|401|403/i.test(msg)) {
-        return bilingual("Der KI-Dienst ist gerade nicht erreichbar. Bitte später noch einmal versuchen.", "The AI service cannot be reached right now. Please try again later.");
+        return bilingual("Der KI-Dienst ist gerade nicht erreichbar. Versuch es später noch einmal.", "The AI service can’t be reached right now. Try again later.");
     }
-    return bilingual(`Dieser Schritt ist fehlgeschlagen: ${msg.slice(0, 300)}`, `This step failed: ${msg.slice(0, 300)}`);
+    return bilingual(`Dieser Schritt hat nicht geklappt: ${msg.slice(0, 300)}`, `This step failed: ${msg.slice(0, 300)}`);
 }
 /**
  * A step that failed ends the run. A failure with a note (Apple Intelligence's) goes into the log
@@ -637,7 +637,7 @@ export async function submitPage(runId, stepId, input) {
             (choice.values.length === 0 || choice.values.some((v) => String(v) === String(answer)))) {
             errors.push({
                 field: id,
-                message: bilingual("Das ist hier gerade nicht verfügbar.", "That is not available here right now."),
+                message: bilingual("Das ist hier gerade nicht verfügbar.", "That isn’t available here right now."),
             });
         }
     }
@@ -667,7 +667,7 @@ export async function submitPage(runId, stepId, input) {
             }
             else if (field.required) {
                 throw new RunInputError([
-                    { field: field.id, message: bilingual("Bitte zuerst verbinden", "Please connect first") },
+                    { field: field.id, message: bilingual("Verbinde zuerst", "Connect first") },
                 ]);
             }
         }

package/apps/runtime/dist/engine/steps.js

@@ -554,7 +554,7 @@ export async function runAgentStep(step, ctx) {
         const text = step.output.format === "json" ? everything : closing || everything;
         if (step.output.format !== "json") {
             if (!text && !assets.length) {
-                throw new StepError(bilingual("Der Schritt hat kein Ergebnis geliefert.", "The step did not deliver a result."));
+                throw new StepError(bilingual("Der Schritt hat kein Ergebnis geliefert.", "The step didn’t return a result."));
             }
             return { text, assets: assets.length ? assets : undefined, at: new Date().toISOString() };
         }
@@ -755,7 +755,7 @@ async function writeHtml(step, ctx, kind) {
         .replace(/```\s*$/, "")
         .trim();
     if (!/<html|<!doctype/i.test(html)) {
-        throw new StepError(bilingual("Das Dokument konnte nicht erstellt werden.", "The document could not be made."));
+        throw new StepError(bilingual("Das Dokument konnte nicht erstellt werden.", "The document couldn’t be created."));
     }
     // On screen (preview, PNG) a print document needs the margin its @page rule gives it on paper.
     return kind === "document"

package/apps/runtime/dist/engine/surface.js

@@ -14,7 +14,7 @@ export async function runSurfaceStep(step, ctx) {
     const components = step.components ?? (await decidedComponents(step, ctx));
     const issues = validateSurface(components, Object.keys(data));
     if (issues.length) {
-        throw new StepError(bilingual(`Die Ansicht ist fehlerhaft: ${issues.map((i) => i.message).join(" ")}`, `The view is faulty: ${issues.map((i) => i.message).join(" ")}`));
+        throw new StepError(bilingual(`Die Ansicht hat Fehler: ${issues.map((i) => i.message).join(" ")}`, `The view has errors: ${issues.map((i) => i.message).join(" ")}`));
     }
     return { surface: { components, data }, at: new Date().toISOString() };
 }

package/apps/runtime/dist/film/step.js

@@ -229,13 +229,13 @@ export async function runFilmStep(step, ctx) {
             if (ctx.signal.aborted) {
                 throw err;
             }
-            throw new StepError(bilingual(`${client.name} hat beim Film aufgehört: ${err.message}. Die Arbeit ist gespeichert; ein neuer Versuch macht dort weiter.`, `${client.name} stopped working on the film: ${err.message}. The work is saved; a new attempt carries on from there.`));
+            throw new StepError(bilingual(`${client.name} hat beim Film aufgehört: ${err.message}. Die Arbeit ist gespeichert. Ein neuer Versuch macht dort weiter.`, `${client.name} stopped working on the film: ${err.message}. The work is saved. A new try carries on from there.`));
         });
         const result = last;
         if (!result || result.is_error) {
             const detail = String(result?.result ?? (stderr.trim() || "no result")).slice(0, 400);
             const failure = failureOf(client, detail);
-            throw new StepError(bilingual(`${errorText(failure, "de")} Die Arbeit ist gespeichert; ein neuer Versuch macht dort weiter.`, `${errorText(failure, "en")} The work is saved; a new attempt carries on from there.`));
+            throw new StepError(bilingual(`${errorText(failure, "de")} Die Arbeit ist gespeichert. Ein neuer Versuch macht dort weiter.`, `${errorText(failure, "en")} The work is saved. A new try carries on from there.`));
         }
         return result;
     };
@@ -265,7 +265,7 @@ export async function runFilmStep(step, ctx) {
             }
             const problem = renderProblem(render.out);
             if (attempt >= RENDER_FIXES) {
-                throw new StepError(bilingual(`Der Film ließ sich nicht rendern: ${problem.slice(0, 400)}`, `The film could not be rendered: ${problem.slice(0, 400)}`));
+                throw new StepError(bilingual(`Der Film ließ sich nicht rendern: ${problem.slice(0, 400)}`, `The film couldn’t be rendered: ${problem.slice(0, 400)}`));
             }
             await ctx.emit("tool", { code: "filmFix" });
             const fixed = await turn(`The final render of film/ failed:\n\n${problem}\n\nFind the cause in the composition's code, fix it, run \`check\` and a draft render through the hyperframes tool until both pass, and end with one line on what you fixed.`, await savedSession(root));

package/apps/runtime/dist/harness/claude.js

@@ -143,5 +143,5 @@ export const claude = {
     },
     login: { args: ["auth", "login"], interactive: false },
     model: (alias, effort) => new ClaudeCodeModel(claude, alias || "sonnet", effort),
-    exhausted: bilingual("Das Anthropic-Konto, mit dem Claude Code angemeldet ist, hat kein Guthaben. Melde Claude Code mit deinem Abo an: in den Einstellungen unter „Modelle“.", "The Anthropic account Claude Code is signed in with has no credit. Sign Claude Code in with your subscription: under “Models” in the settings."),
+    exhausted: bilingual("Das Anthropic-Konto, mit dem Claude Code angemeldet ist, hat kein Guthaben. Melde Claude Code unter Einstellungen → Modelle mit deinem Abo an.", "The Anthropic account Claude Code is signed in with has no credit. Sign Claude Code in with your subscription under Settings → Models."),
 };

package/apps/runtime/dist/harness/codex.js

@@ -225,5 +225,5 @@ export const codex = {
     login: { args: ["login"], interactive: false },
     model: (alias, effort) => new CodexModel(codex, alias || "default", effort),
     image: { alias: "image", model: (alias) => new CodexImageModel(codex, alias || "image") },
-    exhausted: bilingual("Das Kontingent des ChatGPT-Kontos, mit dem Codex angemeldet ist, ist aufgebraucht. Später noch einmal versuchen oder einen anderen Client wählen.", "The quota of the ChatGPT account Codex is signed in with is used up. Try again later or pick another client."),
+    exhausted: bilingual("Das Kontingent des ChatGPT-Kontos, mit dem Codex angemeldet ist, ist aufgebraucht. Versuch es später noch einmal oder wähle einen anderen Client.", "The ChatGPT account Codex is signed in with has used up its quota. Try again later or choose another client."),
 };

package/apps/runtime/dist/harness/model.js

@@ -8,8 +8,8 @@ import { openBridge } from "../mcp/bridge.js";
 import { ModelUnavailableError } from "../model-errors.js";
 import { extensionOf, jsonInstruction, parseJsonAnswer, renderPrompt } from "./prompt.js";
 const workDir = join(env.dataDir, "harness");
-export const signedOut = (h) => bilingual(`${h.name} ist auf diesem Gerät nicht angemeldet. Melde dich in den Einstellungen unter „Modelle“ an.`, `${h.name} is not signed in on this device. Sign in under “Models” in the settings.`);
-export const notInstalled = (h) => bilingual(`${h.name} ist auf diesem Gerät nicht installiert. Installiere es in den Einstellungen unter „Modelle“.`, `${h.name} is not installed on this device. Install it under “Models” in the settings.`);
+export const signedOut = (h) => bilingual(`${h.name} ist auf diesem Computer nicht angemeldet. Melde dich unter Einstellungen → Modelle an.`, `${h.name} isn’t signed in on this computer. Sign in under Settings → Models.`);
+export const notInstalled = (h) => bilingual(`${h.name} ist auf diesem Computer nicht installiert. Installiere es unter Einstellungen → Modelle.`, `${h.name} isn’t installed on this computer. Install it under Settings → Models.`);
 export const exhausted = (h) => h.exhausted ??
     bilingual(`Das Konto, mit dem ${h.name} angemeldet ist, hat kein Guthaben oder Kontingent mehr.`, `The account ${h.name} is signed in with has no credit or quota left.`);
 /** The failure a client reports, as the person should read it. */

package/apps/runtime/dist/harness/terminal.js

@@ -37,7 +37,7 @@ async function ptyModule() {
         return { spawn };
     }
     catch {
-        throw new ServiceError("refused", bilingual("Das eingebaute Terminal ist auf diesem Gerät nicht verfügbar. Führe den Befehl in deinem eigenen Terminal aus.", "The built-in terminal is not available on this device. Run the command in your own terminal."));
+        throw new ServiceError("refused", bilingual("Das eingebaute Terminal ist auf diesem Computer nicht verfügbar. Führe den Befehl in deinem eigenen Terminal aus.", "The built-in terminal isn’t available on this computer. Run the command in your own terminal."));
     }
 }
 function emit(session, event) {
@@ -85,7 +85,7 @@ export async function openTerminal(opts) {
         });
     }
     catch (err) {
-        throw new ServiceError("refused", bilingual(`Der Befehl konnte nicht starten: ${err.message}`, `The command could not start: ${err.message}`));
+        throw new ServiceError("refused", bilingual(`Der Befehl konnte nicht starten: ${err.message}`, `The command couldn’t start: ${err.message}`));
     }
     const session = {
         id,
@@ -147,7 +147,7 @@ export async function openTerminal(opts) {
 function sessionOf(id) {
     const session = sessions.get(id);
     if (!session) {
-        throw new ServiceError("not_found", bilingual("Dieses Terminal gibt es nicht mehr.", "This terminal is gone."));
+        throw new ServiceError("not_found", bilingual("Dieses Terminal gibt es nicht mehr.", "This terminal no longer exists."));
     }
     return session;
 }

package/apps/runtime/dist/mcp/handler.js

@@ -9,7 +9,7 @@ import { noteRequest } from "./seen.js";
 import { registerPrompts, registerTools } from "./tools.js";
 const INSTRUCTIONS = `engenty wizards: page-by-page AI wizards — the person answers pages, AI steps write, research and make images or videos, the person reviews, the result is files.
 Use one: list_wizards, then run_wizard straight away — its widget shows the wizard itself (show_wizard only when the person wants to see a wizard before running it), then follow waitingFor (answer_page, review_step, answer_ask, get_run with waitSeconds). Runs spend credits.
-Build one: get_authoring_guide (schema + design rules), a close starter with get_starter, create_wizard, edit_wizard until "issues" is empty, check with start_test_run + get_test_run. Publish only when the admin asks.
+Build one: get_authoring_guide (schema + design rules), a close starter with get_starter, create_wizard, edit_wizard until "issues" is empty, check with start_test_run + get_test_run. Publish only when the person asks.
 When a run needs the browser, hand over its browserUrl, the wizard's own run page. The studioUrl is for building only: never send someone who uses a wizard to the studio.
 Projects are called spaces in the studio. Ids are for the tools only: name wizards and spaces by their titles and names, and where two spaces share a name, by where each comes from.`;
 /** A wizard definition is a few KB; this leaves room and refuses anything far beyond it. */
@@ -40,7 +40,7 @@ export function mcpHandler() {
         }
         const who = principalOf(authInfo);
         if ((await tenantStatus(who.tenantId)) === "suspended") {
-            return new Response(JSON.stringify({ error: "tenant_suspended" }), { status: 403 });
+            return new Response(JSON.stringify({ error: "This account is suspended.", code: "tenant_suspended" }), { status: 403 });
         }
         if (request.method === "POST") {
             const body = await request

package/apps/runtime/dist/mcp/tools.js

@@ -20,7 +20,7 @@ const note = z
     .string()
     .max(500)
     .optional()
-    .describe("One sentence for the admin about what changed, in their language. Shown in the studio.");
+    .describe("One sentence for the person about what changed, in their language. Shown in the studio.");
 const baseRevision = z
     .number()
     .int()
@@ -104,7 +104,7 @@ export function registerTools(server, who) {
         title: "Authoring guide",
         description: "Read this before writing a wizard: the JSON schema, field kinds, step types and tools, templates, design rules, and the MCP servers of the project.",
         input: z.object({
-            projectId: z.string().optional().describe("Defaults to the admin's first project."),
+            projectId: z.string().optional().describe("Defaults to the person's first project."),
         }),
         readOnly: true,
     }, async ({ projectId }) => {
@@ -177,7 +177,7 @@ export function registerTools(server, who) {
     });
     tool("list_projects", "wizards:read", {
         title: "List projects",
-        description: "The admin's projects, called spaces in the studio. Each holds wizards, a brand and MCP servers. Name a space by its name; where two share one, add where it comes from (`from`). Ids are for the tools: never show them to the person.",
+        description: "The person's projects, called spaces in the studio. Each holds wizards, a brand and MCP servers. Name a space by its name; where two share one, add where it comes from (`from`). Ids are for the tools: never show them to the person.",
         input: z.object({}),
         readOnly: true,
     }, async () => (await listProjects(who.userId)).map((p) => ({
@@ -188,7 +188,7 @@ export function registerTools(server, who) {
     })));
     tool("list_wizards", "wizards:read", {
         title: "List wizards",
-        description: "The admin's wizards, newest first, each with its space's name and where that space comes from. Ids are for the tools: never show them to the person.",
+        description: "The person's wizards, newest first, each with its space's name and where that space comes from. Ids are for the tools: never show them to the person.",
         input: z.object({ projectId: z.string().optional() }),
         readOnly: true,
     }, async ({ projectId }) => {
@@ -251,7 +251,7 @@ export function registerTools(server, who) {
         title: "Create wizard",
         description: "Create a wizard from your JSON, or copy a starter. The draft may still have issues; fix them with edit_wizard.",
         input: z.object({
-            projectId: z.string().optional().describe("Defaults to the admin's first project."),
+            projectId: z.string().optional().describe("Defaults to the person's first project."),
             definition: definition.optional(),
             starterId: z.string().optional().describe("Copy this starter instead of sending JSON."),
             note,
@@ -295,7 +295,7 @@ Returns the new revision and the issues.`,
     // --- publish ---------------------------------------------------------------
     tool("publish_wizard", "wizards:publish", {
         title: "Publish wizard",
-        description: "Publish the draft as a new version behind the share link. Refused while the draft has issues. Only when the admin asked for it.",
+        description: "Publish the draft as a new version behind the share link. Refused while the draft has issues. Only when the person asked for it.",
         input: z.object({ wizardId: z.string() }),
     }, async ({ wizardId }) => publishAndSync(who.userId, wizardId));
     tool("set_sharing", "wizards:publish", {
@@ -321,7 +321,7 @@ Returns the new revision and the issues.`,
     // --- test runs ---------------------------------------------------------------
     appTool("start_test_run", "runs:test", {
         title: "Start test run",
-        description: "Run the draft once with your answers. SPENDS THE ADMIN'S CREDITS (short copy + image ~15, research ~150, video ~250). Pages are filled from `answers`, reviews accepted when acceptReviews is true. Follow it with get_test_run. Shows the flow with the run on it.",
+        description: "Run the draft once with your answers. Spends the person's credits (short copy + image about 15, research about 150, video about 250). Pages are filled from `answers`, reviews accepted when acceptReviews is true. Follow it with get_test_run. Shows the flow with the run on it.",
         input: z.object({
             wizardId: z.string(),
             answers: z
@@ -452,7 +452,7 @@ While status is running, get_run with waitSeconds. Hosts with MCP Apps also show
         return runReport(who.userId, runId, waitSeconds);
     });
     tool("answer_ask", "runs:test", {
-        title: "Answer ask",
+        title: "Answer confirmation",
         description: "A running step asks before it changes something in a connected account (waitingFor.ask, kind confirm): allow it once, or skip it. Ask the person first.",
         input: z.object({
             runId: z.string(),
@@ -466,7 +466,7 @@ While status is running, get_run with waitSeconds. Hosts with MCP Apps also show
     });
     tool("control_run", "runs:test", {
         title: "Control run",
-        description: "back: to the previous page or review. retry: a failed step again. cancel: stop the run.",
+        description: "back: return to the previous page or review. retry: run the failed step again. cancel: stop the run.",
         input: z.object({ runId: z.string(), action: z.enum(["back", "retry", "cancel"]) }),
     }, async ({ runId, action }) => {
         await controlRun(who.userId, runId, action);