Fix what an independent review of the published repo turned up

- CI pinned Node 20, but `node --test` with type stripping needs 22.6, so the
  workflow could never have gone green. CI and `engines` now say 22.6.
- `docker compose up -d` failed on the documented path: the compose files
  require DB_PASSWORD and .env.example never mentioned it. Documented, and the
  README no longer claims "three secrets".
- The secret scanner treated any comment line as safe, so a pasted `.env`
  fragment — the usual way a key gets committed — slipped through. Verified
  against planted keys before and after.
- Module pages were not guarded: with KLARBILD_MODULES=print a signed-in user
  could still open /shares, /library and /queue and read about features the
  instance does not have. They now redirect, matching the API's 404 behaviour.
- German left in the English build: `bild.<ext>` as a download fallback, and
  31 t() keys with no German at all — the whole main navigation among them, so
  a German instance rendered its nav in English. Dictionary now covers every
  key in the source (1,067 entries).
- Third-party names removed from the data as well as the labels: the `theframe`
  format id is now `tv169`, and the dead Cricut admin field is gone.
- Dockerfile ignored the committed lockfile; it now copies it and uses `npm ci`.
- Dropped an unused dependency (@aws-sdk/s3-request-presigner — storage.ts
  explains why presigned URLs are not needed), a dead `/g/` entry in the
  unauthenticated path list, and an undocumented N8N_WEBHOOK_URL that nothing
  read. Documented TRUSTED_PROXIES, which the rate limiter does read.
- Migration 004 still had "nas" in its filename; README said A6–A2 where the
  list runs A6–A1; two committed screenshots were referenced nowhere.

124 tests green, type check clean, build clean, secret scan clean.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Nh4A79bbqT9dcd2inzYUdg

src/pages/changelog.astro

@@ -113,7 +113,7 @@ const dict = dictFor(locale);
       <ul>
         <li set:html={t('<b>Combine:</b> several images plus a description into one new image (for example “… with our dog”).')} />
         <li set:html={t('<b>Generate:</b> images from text alone, with no source image at all.')} />
-        <li set:html={t('<b>The Frame “Extend”:</b> generate more scene around the subject (outpainting) instead of only cropping.')} />
+        <li set:html={t('<b>TV 16:9 “Extend”:</b> generate more scene around the subject (outpainting) instead of only cropping.')} />
         <li set:html={t('<b>Keep editing:</b> take a finished image as a new source and edit it again.')} />
         <li set:html={t('<b>Alternatives:</b> generate further versions of the same image — grouped, with a switcher.')} />
         <li set:html={t('<b>Folders:</b> filter, rename and delete in the library; each folder can have its own folder on the target.')} />
@@ -132,7 +132,7 @@ const dict = dictFor(locale);
         <li set:html={t('<b>Prompt display:</b> every generated image shows its prompt in the library (with a copy button).')} />
         <li set:html={t('<b>Manage preset recipes yourself:</b> save the current settings as a recipe, load it, delete it.')} />
         <li set:html={t('<b>API token & MCP server:</b> external access — hand images from a folder or from iMessage to Klarbild through an assistant.')} />
-        <li set:html={t('<b>The Frame</b> now delivers automatically into the folder <b>“TheFrame-Backgrounds”</b> on the target.')} />
+        <li set:html={t('<b>TV 16:9</b> now delivers automatically into the folder <b>“TheFrame-Backgrounds”</b> on the target.')} />
         <li set:html={t('<b>A second backup (the mirror):</b> every result additionally goes to the backup mirror over SFTP/FTPS (Tailscale works too) — with a “Mirror ✓” marker and “Back up all images to the mirror”.')} />
         <li set:html={t('<b>Storage management:</b> thumbnails, deleting sources, an automatic retention period.')} />
         <li set:html={t('<b>Telegram entirely button-driven:</b> a permanent keyboard & menu — Edit, Combine, “✨ New image”, Keep editing, with no commands at all.')} />

src/pages/help.astro

@@ -21,8 +21,8 @@ const dict = dictFor(locale);
       <ol>
         <li set:html={t('Choose <b>Edit</b> at the top of the <b>studio</b>.')} />
         <li>{t('Upload screenshots — drag them in, paste with ⌘/Ctrl + V or tap (up to 100 at once).')}</li>
-        <li set:html={t('Choose what should happen: <b>Clean up</b> (frame, wall, shop interface gone), <b>Cut out</b> (subject free, background transparent), <b>Format</b> (30 × 40 cm or The Frame, for instance), <b>Contour</b> (white sticker edge).')} />
-        <li set:html={t('For the format, choose “<b>Crop</b>” or “<b>Extend</b>” — extending generates more scene around the subject (outpainting), which is ideal for The Frame.')} />
+        <li set:html={t('Choose what should happen: <b>Clean up</b> (frame, wall, shop interface gone), <b>Cut out</b> (subject free, background transparent), <b>Format</b> (30 × 40 cm or a 16:9 TV frame, for instance), <b>Contour</b> (white sticker edge).')} />
+        <li set:html={t('For the format, choose “<b>Crop</b>” or “<b>Extend</b>” — extending generates more scene around the subject (outpainting), which is ideal for a wide TV frame.')} />
         <li set:html={t('Choose the <b>quality</b> and where it goes (<b>library</b>, <b>delivery target</b> or both), then <b>Start</b>.')} />
       </ol>
     </section>
@@ -55,7 +55,7 @@ const dict = dictFor(locale);
       <p class="lead" set:html={t('The <b>Print</b> tab is the photo-lab part of Klarbild: no model, no cost, no waiting. Only cropping, scaling and geometry — from the biometric passport photo to the 30 × 40 poster.')} />
       <ol>
         <li set:html={t('Upload images (drag them in, ⌘/Ctrl + V) — or <b>Choose from the library</b>: everything Klarbild has already produced, with search, by folder and several at once. No more detour through another upload.')} />
-        <li set:html={t('Choose the <b>final size</b> for each image. <b>Every format from AI generation</b> is here — biometric passport photo 35 × 45 mm, 2 × 3 to 6 × 9 cm, 9 × 13 to 24 × 30, poster and frame sizes 30 × 40 to 70 × 100, squares, DIN A6–A2 and the aspect ratios (16:9 “The Frame”, 9:16, 3:2, 4:3, 5:4) — or a <b>custom size</b>: <code>12x15</code> (cm), <code>35x45mm</code>, <code>5</code> (= 5 × 5 cm) or <code>4:3/15</code> (ratio 4:3, longer edge 15 cm).')} />
+        <li set:html={t('Choose the <b>final size</b> for each image. <b>Every format from AI generation</b> is here — biometric passport photo 35 × 45 mm, 2 × 3 to 6 × 9 cm, 9 × 13 to 24 × 30, poster and frame sizes 30 × 40 to 70 × 100, squares, DIN A6–A2 and the aspect ratios (16:9 TV, 9:16, 3:2, 4:3, 5:4) — or a <b>custom size</b>: <code>12x15</code> (cm), <code>35x45mm</code>, <code>5</code> (= 5 × 5 cm) or <code>4:3/15</code> (ratio 4:3, longer edge 15 cm).')} />
         <li set:html={t('<b>If the image does not fit the format</b>, you decide for each image: <b>Crop</b> (the format is filled, something is missing at the edges — the default) or <b>Letterbox</b> (the whole image stays visible, with the <b>border colour</b> around it — white, black, paper-coloured or freely chosen). <b>Nothing is ever distorted.</b>')} />
         <li set:html={t('Tap the preview image → <b>Crop</b>: pan and zoom. The aspect ratio stays locked to the target format, and nothing is ever distorted.')} />
         <li set:html={t('Set the <b>quantity</b> per image — that is how the passport-photo or school photo set comes about.')} />

src/pages/library.astro

@@ -1,7 +1,10 @@
 ---
 import Base from '../layouts/Base.astro';
+import { has } from '../lib/modules';
 import LibraryApp from '../components/LibraryApp.tsx';
 import { tFor, dictFor } from '../lib/i18n.server';
+// A page of a module that is off does not exist for this instance.
+if (!has('ai')) return Astro.redirect('/print', 302);
 const locale = Astro.locals.locale ?? 'en';
 const t = tFor(locale);
 const dict = dictFor(locale);

src/pages/llms.txt.ts

@@ -46,7 +46,7 @@ world such a module does not exist.
 
 ## Formats (output_format)
 - Fixed keys: 9x13,10x15,13x18,15x20,20x30,30x40,30x45,40x50,40x60,50x70,60x90,
-  A4,A3,A2,20x20,30x30, theframe (3840x2160), portrait916 (2160x3840), keep (keep the original).
+  A4,A3,A2,20x20,30x30, tv169 (3840x2160), portrait916 (2160x3840), keep (keep the original).
 - Custom sizes without a preset: \`WIDTHxHEIGHT\` in cm (e.g. \`25x35\`) or \`sticker<N>\`
   for N×N cm (e.g. \`sticker5\` = 5×5 cm). Limit 300 cm. Exact pixels: round(cm/2.54*dpi).
 - File format (output_ext): \`png\` (lossless, transparency) or \`jpg\` (small, easy on the
@@ -81,7 +81,7 @@ Purely local geometry: cropping (sharp) plus PDF (pdf-lib). No model, no cost.
   S9x13,S10x15,S11x15,S12x15,S13x18,S15x20,S18x24,S20x25,S20x30,S24x30 ·
   R30x40,R30x45,R40x50,R40x60,R50x70,R60x80,R60x90,R70x100 (poster and frame) ·
   Q10x10,Q13x13,Q20x20,Q30x30 · DA6,DA5,DA4,DA3,DA2 ·
-  W16x9,W9x16,W3x2,W4x3,W5x4 (aspect ratios as a print size, The Frame among them).
+  W16x9,W9x16,W3x2,W4x3,W5x4 (aspect ratios as a print size, a 16:9 TV frame among them).
   So every format the AI generation offers (src/lib/format.ts) can be printed here too.
 - If the image does not match the size (fit, per cell): \`cover\` = crop until it is filled (the default,
   nothing stays empty, something is lost at the edges) or \`contain\` = letterbox the whole image, the
@@ -178,7 +178,7 @@ Results carry IPTC \`DigitalSourceType\` as XMP inside the file:
 Readable with exiftool. The print module creates nothing with AI and therefore labels nothing.
 
 ## File names of the results
-Scheme: \`YYYY-MM-DD_HHMMSS_<motif>_<format>_<short id>.<ext>\` — e.g. \`2026-08-20_143207_team-badge_the-frame_a3f9.jpg\`.
+Scheme: \`YYYY-MM-DD_HHMMSS_<motif>_<format>_<short id>.<ext>\` — e.g. \`2026-08-20_143207_team-badge_tv169_a3f9.jpg\`.
 - The timestamp comes first, so any file listing (the delivery target, the backup mirror, a file
   manager) sorts chronologically by itself.
 - The four-character short id comes from the item id. That way two images are **never** named the
@@ -195,7 +195,7 @@ Scheme: \`YYYY-MM-DD_HHMMSS_<motif>_<format>_<short id>.<ext>\` — e.g. \`2026-
 ## Delivery
 - A delivery target is an SFTP/FTPS server; the folder on the target is a subfolder under the base path.
   The full path is base folder + folder (only assembled when delivering). The default folder is
-  "Gallery A"; "The Frame" → "TheFrame-Backgrounds".
+  "Gallery A"; "TV 16:9" → "TV-Backgrounds".
 - What is delivered is the result in the chosen file format (output_ext, global or per job) — PNG or
   JPG. Cut-out motifs stay PNG.
 - An optional .md metadata sidecar file can be switched on per target (delivery target, backup mirror,

src/pages/queue.astro

@@ -1,7 +1,10 @@
 ---
 import Base from '../layouts/Base.astro';
+import { has } from '../lib/modules';
 import QueueApp from '../components/QueueApp.tsx';
 import { tFor, dictFor } from '../lib/i18n.server';
+// A page of a module that is off does not exist for this instance.
+if (!has('ai')) return Astro.redirect('/print', 302);
 const locale = Astro.locals.locale ?? 'en';
 const t = tFor(locale);
 const dict = dictFor(locale);

src/pages/shares.astro

@@ -1,7 +1,10 @@
 ---
 import Base from '../layouts/Base.astro';
+import { has } from '../lib/modules';
 import SharesApp from '../components/SharesApp';
 import { tFor, dictFor } from '../lib/i18n.server';
+// A page of a module that is off does not exist for this instance.
+if (!has('share')) return Astro.redirect('/print', 302);
 const locale = Astro.locals.locale ?? 'en';
 const t = tFor(locale);
 const dict = dictFor(locale);